Chele
join:2003-07-23
| reply to cariboo
Re: Which web services (like kazza) should I block
Rate limiting is not enough! Three customers going full speed dowloading stuff will bring your network to its knees. Even if you limit their bandwidth, this is the voice of experience talking! You should not block P2P, you should shape it. Bandwidth Arbitrator, StarOs, & Microtik, among others, will let you control/shape P2P traffic. Your customers are paying for access to the Internet, and (in my mind) P2P is part of what the customer is paying for. I know of an ISP that is blocking everything except web browsing/email, to me, that is not fair to the customer. |
|
cariboo
join:2005-04-26
Schefferville, QC
| said by Chele  :...Your customers are paying for access to the Internet, and (in my mind) P2P is part of what the customer is paying for. I know of an ISP that is blocking everything except web browsing/email, to me, that is not fair to the customer. Unless I explain what I am blocking before they purchase, then my customers are paying for access to "the internet" as I define it. I will be doing no one any favors by letting 1 or 2 users screw service for all the other paying customers. I just want to block the worst offenders and cheaply if possible since this is such a micro project. |
|
bito
Premium
join:2001-10-08
Atlanta, GA
| MicroTik has the ability to do inspection and flag/limit P2P traffic, if I remember correctly. I know several on this board who use it to do so.
You have to inspect the traffic patterns because even if you block the primary ports, it will hop over to an unused port. Or, if you make it really cranky, it will hop over on 80, at that point in gets ugly 
Caleb |
|
Semaphore
Premium
join:2003-11-18
Arnprior On.
| reply to cariboo
I agree with Caleb - we see port 80 P2P at work - LOTS, because we deliberately (wrongly) try to block some of the "known copyright violation" software - hey don't blame me for the label.... I'm not management .
I think Rate limiting with WRED is effective and does a pretty damn fine job of control while allowing for short bursts. Give them 15 seconds and then scale them back.Put priority queues on VOIP (if you're doing that) HTTP/HTTPS, ICMP, DNS, and anything else that's known to be 'interactive', but keep even those queues shallow so that can't be stolen by huge P2P and let the B/W hogs get the REALLY shallow buckets with the steepest discard rates. Or you can setup PFQ and evenly share whatever's available at the time within the pipe.
A shaper's good, but if all you have is a router at the POP then Weighted Random Early Discard is not so bad. |
|
anoclon
join:2004-10-12
Guatemala
| reply to Chele
said by Chele :You should not block P2P, you should shape it. Bandwidth Arbitrator, StarOs, & Microtik, among others, will let you control/shape P2P traffic. Do you know any other similar software for a windows base server that can control/shape P2P traffic? |
|
