koitsu
Premium
join:2002-07-16
Mountain View, CA
| reply to keyboard5684
Re: Still sounds like....
None of the p2p applications use IETF-registered protocol numbers; they're all completely variable, which is why it's generally impossible to filter (similar to IRC servers in respect of implementation).
I've never seen any of those products until now -- thanks for pointing out that stuff like this does exist. I'm always proud to be wrong, especially when learning new things. 
--
Making life hard for others since 1977. |
|
keyboard5684
join:2001-08-01
Youngsville, PA
 ·Teliax VOIP
 ·WestPAnet Inc.
 ·WestPAnet Inc. CA..
| reply to koitsu
They would not need a layer 7 device.
p2p operates in generally the same ports. It is not difficult to block or slow those particular ports.
There are plenty of devices out there, in case you did not want to use a router, that can be put "into a line" to control traffic. You would be surprised how many ISPs do use these devices. PacketShaper is one that comes to mind or maybe even etinc. Here are a few of the links...
»www.etinc.com
»www.packeteer.com/
»www.logisense.com/traffic_home.html
Juniper and Cisco are not the only products available. PacketShaper is a carier class design and can take gigabit links I believe. I have seen these at ISPs.
|
|
koitsu
Premium
join:2002-07-16
Mountain View, CA
| reply to Brown2
Pretty unlikely; maintaining a list of all the centralised server IPs would be a real PITA (they'll change once the server administrators find out they're being blocked -- another reason p2p is shady), not to mention would bog the router down quite a bit. Routers are supposed to just blindly push packets; the more time they spend analysing IP headers, the less time they have to push packets.
Not to mention, if they were to filter p2p "effectively", they would need something like a layer 7 filtering device -- and you sure as hell won't find one of these on any ISP, since the degree of service degredation would be through the ROOF. Analysing IP headers takes enough time as-is -- analysing entire data packets for specifically-formatted strings, usually matching a regex, would take an immense amount of time. No product I know of right now from Juniper or Cisco can do this.
--
Making life hard for others since 1977. |
|
