topic Re: How to prioritize bandwidth allocation in R80.20? in General Topics

How to prioritize bandwidth allocation in R80.20?

Vladimir — Fri, 07 Dec 2018 00:14:43 GMT

If I recall accurately, in the past, use of QOS was associated with some serious limitations.

One of potential customers is inquiring about the possibility of using Check Point gateways for bandwidth prioritization for specific sites.

Now that we are on R80.20 and have the ability to use Domain objects in QOS, would this be acceptable configuration?

I would also appreciate any advise or shared experience with QOS on R80.20 and if any issues were encountered that I should be aware of.

The bandwidth limiters available in the APCTL are not really an option due to hard limits and method used to enforce those.

Thank you,

Vladimir

Re: How to prioritize bandwidth allocation in R80.20?

PhoneBoy — Fri, 07 Dec 2018 05:25:07 GMT

QoS had some limitations with CoreXL that were resolved in R77.10, FWIW.

Re: How to prioritize bandwidth allocation in R80.20?

Vladimir — Fri, 07 Dec 2018 13:00:41 GMT

Thank you for clarification. Can you confirm that the approach depicted in my post above would achieve desired result or am I missing something? I'll have a call with the potential client today at 3:00 pm EDT and would like to give him unambiguous answer.

Re: How to prioritize bandwidth allocation in R80.20?

PhoneBoy — Fri, 07 Dec 2018 14:28:11 GMT

The way I understand it, this should do what you're after.

It looks like the ability to use Domain objects in QoS predates R80, so it's not a "new" feature.

That said, with FQDN domains (which ARE new in R80.x), I imagine they work better in QoS as well

Re: How to prioritize bandwidth allocation in R80.20?

Vladimir — Sat, 08 Dec 2018 17:01:34 GMT

What are the steps to achieve creation of equivalent settings from embedded systems in a centrally managed environments?

Re: How to prioritize bandwidth allocation in R80.20?

PhoneBoy — Sat, 08 Dec 2018 17:46:16 GMT

Offhand, I don't know.

Re: How to prioritize bandwidth allocation in R80.20?

Vladimir — Tue, 18 Dec 2018 17:40:55 GMT

Dameon,

Can you get someone from QoS group to take a look at this thread?

One of the CP SEs I am working with and I are conducting the simulations with the use of the FQDNs in QoS by limiting bandwidth allocation and so far we were not able to do it successfully.

Thank you,

Vladimir

Re: How to prioritize bandwidth allocation in R80.20?

PhoneBoy — Tue, 18 Dec 2018 18:03:10 GMT

"Limit Bandwidth Consuming Application is disabled" is a no-op here since it's disabled.

You would not use the QoS blade for this, since it has no concept of applications, you would use App Control.

"Limit low latency traffic to 20%" refers to these services:

Which suggests a rule that looks something like (will have to play with weight and/or rule limit):

Re: How to prioritize bandwidth allocation in R80.20?

Vladimir — Tue, 18 Dec 2018 18:29:20 GMT

Thanks!

The issue that I am trying to resolve is the bandwidth limit per site accessed based on FQDN Domain object.

There are options of using URIs for QoS as well, creating resources in the format of, for instance, www.samplesite.com/* , associating them with HTTP and HTTPS and placing them in the "Services" sections of the QoS policy.

I am trying to figure out which is the appropriate way to achieve this.

Re: How to prioritize bandwidth allocation in R80.20?

PhoneBoy — Tue, 18 Dec 2018 18:39:22 GMT

You could do this a couple of ways:

Specify the precise limit in terms of "Rule Limit"
Specify a "weight" for each rule
- If all rules are weighted are the same, then each rule will be allocated roughly the same amount of bandwidth.
- If one rule has a higher weight than another, then that rule will get a proportionally higher amount of bandwidth (percentage based on total weight of all rules).
  - For example, if the weight of all rules totals 100 and you give rule 5 a weight of 20, it will get 20 percent of the available bandwidth.

Re: How to prioritize bandwidth allocation in R80.20?

Vladimir — Tue, 18 Dec 2018 18:44:58 GMT

But that is the problem: with absolute limit specified and the destination defined as the FQDN Domain object, I do not see the limit being enforced when, for instance, the download is initiated (irrespective of the protocol used).

Re: How to prioritize bandwidth allocation in R80.20?

PhoneBoy — Tue, 18 Dec 2018 19:04:43 GMT

Sounds like a TAC case may be in order.

Re: How to prioritize bandwidth allocation in R80.20?

Vladimir — Sun, 06 Jan 2019 22:05:51 GMT

Dameon Welch-Abernathy The SE that I am working with has opened the SR#6-0001181586

If possible, please see if we can get some traction on it, as we are being asked the same questions that were already answered. It was initiated on December the 21st.

Thank you,

Vladimir

Re: How to prioritize bandwidth allocation in R80.20?

PhoneBoy — Tue, 08 Jan 2019 06:39:19 GMT

Usually better send me those privately

But will look into it

Re: How to prioritize bandwidth allocation in R80.20?

Vladimir — Tue, 08 Jan 2019 14:47:34 GMT

My bad. Will do so in the future and thank you.