shaping inbound traffic

[mulhollandm]

folks

we've recently acquired a packetshaper, i attended a half day training and now have to configure some shaping on my internet pipe and i'm a bit confused

we have a 100Mb pipe which is 100% over lunchtimes so obviously access is slow

we allow users to have internet access and we also host internet sites so the 100Mb link has traffic in both directions

i've been told now to prioritise access to a couple of public web sites from the inside to the internet, i.e. from our own users to www.bbc.co.uk

i've also been asked to prioritise traffic for all sites which we host, i.e. from remote users on the internet to websites hosts behind our link

am i right in assuming

for outbound traffic i assume i'll need to create a partition for each url/fqdn or for a folder with all relevant the domains and assign it a guaranteed portion of the bandwidth, i.e. 20%

for inbound traffic i assume i'll need to create a partition for each url/fqdn or for a folder with all relevant the domains and assign it a guaranteed portion of the bandwidth, i.e. 20%

my query is whether packeteer is intelligent to provide this level of filtering and am i on the right track

also do i apply the outside to inside traffic as inbound? (sorry if that sounds stupid) and the insde to outside as outbound?

thanks to anyone taking the time and for having the patience to wade through this

i'd be grateful for any documents or links with sample configs

thanks to all

[Norbert]

Hi,

Nice challenge you have here. You will be able to fix it with your PS, just giving you hints so you can feel the satisfaction of solving the puzzle yourself

i've been told now to prioritise access to a couple of public web sites from the inside to the internet, i.e. from our own users to www.bbc.co.uk
i've also been asked to prioritise traffic for all sites which we host, i.e. from remote users on the internet to websites hosts behind our link

Easiest way to separate the two is to create classes based on server location, ie a class for Server inside and Server Outside. See
https://bto.bluecoat.com/packetguide/8.5/nav/overviews/matching-rules.htm#server

You can also make (in addition) classes based on the FQDN, but those are less transparent and harder to maintain.

also do i apply the outside to inside traffic as inbound? (sorry if that sounds stupid) and the insde to outside as outbound?

It says more about the quality of the training than you. Yes, you are correct.

No prob on the time. You will spend more time exploring PacketGuide (https://bto.bluecoat.com/packetguide/8.5/index.htm) than I spent on this post. The Sections https://bto.bluecoat.com/packetguide/8.5/nav/overviews/classification-overview.htm and https://bto.bluecoat.com/packetguide/8.5/nav/overviews/control-strategy-overview.htm are the most relevant ones for you.

Norbert.