10-17-2011 04:20 PM - edited 03-04-2019 01:58 PM
folks
i have a quick query on rate limiting
i have a two tier firewall architecture with a 3rd party hanging off an interface on the internal firewall and the internet off my external firewall
i want to limit the 3rd party to 2mb in/out on my internet pipe
my query is this
if i use rate limiting, car or some mechanism to limit them to 2mb on the interface of my internal firewall will it prevent them using my internet bandwidth or will the rate limiting on affect the interface they are connected to
so i was wondering how car etc can stop a simple http request from downloading a large file
does the rate limiting mechanism force some kind of tcp windowing and if so does rate limiting only work on tcp
sorry for all the questions but i'm trying to find a way to restrict bandwidth used by certain networks
thanks to anyone taking the time to reply or reading this
Solved! Go to Solution.
10-17-2011 06:18 PM
Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
Rate-limiting can control egress bandwidth utilization, but is not as effective for ingress bandwidth utilization.
As you've already noted, TCP flows, seeing drops caused by the rate-limiter, should slow although this after they've already burst above your rate limit.
Non-responsive flows, i.e. most non-TCP flows, will not slow their transmission rate although rate limiting can cause havoc with the application using that flow.
Ideally, you want to control the far side's egress too, but generally this is not possible if it's an ISP interface.
PS:
BTW, you can also control bandwidth with a shaper (but don't use for ingress).
10-17-2011 06:18 PM
Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
Rate-limiting can control egress bandwidth utilization, but is not as effective for ingress bandwidth utilization.
As you've already noted, TCP flows, seeing drops caused by the rate-limiter, should slow although this after they've already burst above your rate limit.
Non-responsive flows, i.e. most non-TCP flows, will not slow their transmission rate although rate limiting can cause havoc with the application using that flow.
Ideally, you want to control the far side's egress too, but generally this is not possible if it's an ISP interface.
PS:
BTW, you can also control bandwidth with a shaper (but don't use for ingress).
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide