Youtube video streaming limiting on cisco 881 using NBAR2 and ZBF

[shehanfernando]

Hi,

I'm trying to limit (qos) Youtube video bandwidth using cisco NBAR2 and ZBF . Blocking the youtube is working fine but when try to police the traffic rate it does not work at all . Can somebody help me to fix this ? Are there any way to achieve this video QoS on ZBF ?  I just want to limit bandwidth of youtube video 

class-map type inspect match-all LIMIT_YOUTUBE
      match access-group name ZEZO_DOWN_USERS
      match protocol youtube

policy-map type inspect INSIDE_TO_OUTSIDE_POLICY
    class type inspect LIMIT_YOUTUBE
        inspect
        police rate 8000 burst 1000
    class type inspect DEFAULT_POLICY
        inspect
        class class-default
        drop

[Philip D'Ath]

Your config reads like you are policing traffic going from the inside to the outside of your device.

You need to do this in the opposite direction - the downloads, instead of limiting the uploads.

[shehanfernando]

Hi,

I have some doubts about incoming traffic filtering.

1) First scenario 

If policy is put like below, no incoming traffic is filter because of inspect command on "DEFAULT_POLICY_OUT" class 

policy-map type inspect INSIDE_TO_OUTSIDE_POLICY
    class type inspect DEFAULT_POLICY_OUT
       inspect
    class class-default
       drop

policy-map type inspect OUTSIDE_TO_INSIDE_POLICY
       class type inspect LIMIT_YOUTUBE
          drop
       class class-default
          drop

2) Second scenario 

policy-map type inspect INSIDE_TO_OUTSIDE_POLICY
       class type inspect PASS_YOUTUBE
           pass
       class type inspect DEFAULT_POLICY_OUT
           pass
       class class-default
           drop

policy-map type inspect OUTSIDE_TO_INSIDE_POLICY
       class type inspect LIMIT_YOUTUBE
            drop
       class type inspect DEFAULT_POLICY_IN
             pass
       class class-default
             drop

in this policy, i can filter the incoming traffic (dropping youtube traffic is working fine) but can't police the incoming traffic because police command could not use with pass command.

I alter the above police little bit and try following as well. but it does not work somehow. Can you make any suggestion ??

class type inspect PASS_YOUTUBE
   inspect

class type inspect LIMIT_YOUTUBE
     inspect

police rate 8000 burst 1000