cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
454
Views
0
Helpful
1
Replies

rate limiting query

mulhollandm
Level 1
Level 1

folks

i have a quick query on rate limiting

i have a two tier firewall architecture with a 3rd party hanging off an interface on the internal firewall and the internet off my external firewall

i want to limit the 3rd party to 2mb in/out on my internet pipe

my query is this

if i use rate limiting, car or some mechanism to limit them to 2mb on the interface of my internal firewall will it prevent them using my internet bandwidth or will the rate limiting on affect the interface they are connected to

so i  was wondering how car etc can stop a simple http request from downloading a large file

does the rate limiting mechanism force some kind of tcp windowing and if so does rate limiting only work on tcp

sorry for all the questions but i'm trying to find a way to restrict bandwidth used by certain networks

thanks to anyone taking the time to reply or reading this 

1 Accepted Solution

Accepted Solutions

Joseph W. Doherty
Hall of Fame
Hall of Fame

Disclaimer

The   Author of this posting offers the information contained within this   posting without consideration and with the reader's understanding that   there's no implied or expressed suitability or fitness for any purpose.   Information provided is for informational purposes only and should not   be construed as rendering professional advice of any kind. Usage of  this  posting's information is solely at reader's own risk.

Liability Disclaimer

In   no event shall Author be liable for any damages whatsoever (including,  without limitation, damages for loss of use, data or profit) arising  out  of the use or inability to use the posting's information even if  Author  has been advised of the possibility of such damage.

Posting

Rate-limiting can control egress bandwidth utilization, but is not as effective for ingress bandwidth utilization.

As you've already noted, TCP flows, seeing drops caused by the rate-limiter, should slow although this after they've already burst above your rate limit.

Non-responsive flows, i.e. most non-TCP flows, will not slow their transmission rate although rate limiting can cause havoc with the application using that flow.

Ideally, you want to control the far side's egress too, but generally this is not possible if it's an ISP interface.

PS:

BTW, you can also control bandwidth with a shaper (but don't use for ingress).

View solution in original post

1 Reply 1

Joseph W. Doherty
Hall of Fame
Hall of Fame

Disclaimer

The   Author of this posting offers the information contained within this   posting without consideration and with the reader's understanding that   there's no implied or expressed suitability or fitness for any purpose.   Information provided is for informational purposes only and should not   be construed as rendering professional advice of any kind. Usage of  this  posting's information is solely at reader's own risk.

Liability Disclaimer

In   no event shall Author be liable for any damages whatsoever (including,  without limitation, damages for loss of use, data or profit) arising  out  of the use or inability to use the posting's information even if  Author  has been advised of the possibility of such damage.

Posting

Rate-limiting can control egress bandwidth utilization, but is not as effective for ingress bandwidth utilization.

As you've already noted, TCP flows, seeing drops caused by the rate-limiter, should slow although this after they've already burst above your rate limit.

Non-responsive flows, i.e. most non-TCP flows, will not slow their transmission rate although rate limiting can cause havoc with the application using that flow.

Ideally, you want to control the far side's egress too, but generally this is not possible if it's an ISP interface.

PS:

BTW, you can also control bandwidth with a shaper (but don't use for ingress).