cariboo
join:2005-04-26
Schefferville, QC
| reply to Chele
Re: Which web services (like kazza) should I block
said by Chele  :...Your customers are paying for access to the Internet, and (in my mind) P2P is part of what the customer is paying for. I know of an ISP that is blocking everything except web browsing/email, to me, that is not fair to the customer. Unless I explain what I am blocking before they purchase, then my customers are paying for access to "the internet" as I define it. I will be doing no one any favors by letting 1 or 2 users screw service for all the other paying customers. I just want to block the worst offenders and cheaply if possible since this is such a micro project. |
|
bito
Premium
join:2001-10-08
Atlanta, GA
| MicroTik has the ability to do inspection and flag/limit P2P traffic, if I remember correctly. I know several on this board who use it to do so.
You have to inspect the traffic patterns because even if you block the primary ports, it will hop over to an unused port. Or, if you make it really cranky, it will hop over on 80, at that point in gets ugly 
Caleb |
|
Semaphore
Premium
join:2003-11-18
Arnprior On.
| reply to cariboo
I agree with Caleb - we see port 80 P2P at work - LOTS, because we deliberately (wrongly) try to block some of the "known copyright violation" software - hey don't blame me for the label.... I'm not management .
I think Rate limiting with WRED is effective and does a pretty damn fine job of control while allowing for short bursts. Give them 15 seconds and then scale them back.Put priority queues on VOIP (if you're doing that) HTTP/HTTPS, ICMP, DNS, and anything else that's known to be 'interactive', but keep even those queues shallow so that can't be stolen by huge P2P and let the B/W hogs get the REALLY shallow buckets with the steepest discard rates. Or you can setup PFQ and evenly share whatever's available at the time within the pipe.
A shaper's good, but if all you have is a router at the POP then Weighted Random Early Discard is not so bad. |
|
