Taming HTTP

[marktyree]

The problem is that bandwidth to our regional offices is being consumed by HTTP inbound traffic. Regional offices are connected via VPN tunnel over T1 links. Each office accesses the internet via their internet link, only data traverses the tunnel to corporate. Inbound HTTP traffic from the internet slows data traffic to a crawl causing complaints of network speed. Have heard suggestions of Rate Limiting, Class Based Policing, etc...Anyone have similar experience and know of any not so processor intensive remedies not involving third party hardware.

[lgijssel]

You might consider custom queueing and assign a lower priority to http.

That is, if you have routers directly terminating the T1's or somewhere in the path of the dataflow. On a PIX firewall, this will not work.

Regards,

Leo