topic Re: Bandwidth limit per app /category in General Topics

Bandwidth limit per app /category

ovidiu_catrina — Thu, 15 Feb 2018 11:41:26 GMT

hello

i have a cluster of 2 firewalls, they have enabled only the application blade, without the URL blade.

i want to limit the bandwidth for the category media streams and media sharing in the following way.

the thing is that is applied and installed but I have no idea on how to check if this is actually working.

i tried to look at the applications and sites but i dont see anything related to traffic being rate limited.

on the logs i do see that the traffic matches the rule created on the application layer but as i said, i have no idea on how to check if the limit is applied or not.

can someone guide me ?

Regards

Re: Bandwidth limit per app /category

Marco_Valenti — Thu, 15 Feb 2018 12:24:19 GMT

That is a nice question

One way can be , if you have monitor blade enable from top source view compare the bandwith in use by single host

But someone can be more helpful than me on this

Re: Bandwidth limit per app /category

ovidiu_catrina — Thu, 15 Feb 2018 13:41:39 GMT

i am looking more to an answer similar to this

How to monitor bandwidth limit for application control

Re: Bandwidth limit per app /category

Timothy_Hall — Thu, 15 Feb 2018 21:42:38 GMT

Please see my recent post in this thread, your monitoring options are somewhat "limited":

How to monitor bandwidth limit for application control

--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com

Re: Bandwidth limit per app /category

Pablo_Barriga — Thu, 15 Feb 2018 22:22:14 GMT

Hello can you edit the profile in the smartlog to check for further information about traffic.

Re: Bandwidth limit per app /category

Marco_Valenti — Fri, 16 Feb 2018 07:55:53 GMT

you ask for monitoring bandwith and not for dropped packet ofc Tim reply was more in deep no doubt about that

Re: Bandwidth limit per app /category

ovidiu_catrina — Fri, 16 Feb 2018 08:33:09 GMT

thanks for the feedback all, unfortunately this is not working for me.

i am not able to see any discarded packet on the smartview or smartlog.

also monitoring this through CLI as Tim Hall‌ fw ctl zdebug +drop | grep APPI_LIMIT i am not able to find a thing either.

so here it goes my question, is this really working? can media stream traffic be throttled ?

Regards

Re: Bandwidth limit per app /category

PhoneBoy — Fri, 16 Feb 2018 17:20:21 GMT

This is more of a General Product Topics‌ question.

You won't necessarily see drops in SmartLog when traffic is limited.

From the notes I've seen internally, this is what you should be looking at to validate that limiting is happening (granted, this is from R75.40:

fw ctl zdebug -m APPI all > dbg.txt

In dbg.txt, look for: fw_appi_limit_set_matched_data: Set new rule_id: (rule_num)

This will tell you that traffic is being matched to a rule with limit.

Note this debug can be overwhelming on gateways with a lot of traffic, so I would only run it fairly briefly.

Re: Bandwidth limit per app /category

ovidiu_catrina — Mon, 19 Feb 2018 10:13:23 GMT

just a follow up, i managed to get logs on the zdebug.

now my question is , is there a way to to have this in a nice report in the smartevent with the views/reports?

Regards

Re: Bandwidth limit per app /category

PhoneBoy — Mon, 19 Feb 2018 20:04:00 GMT

What are you trying to get into the reports, exactly, that bandwidth was actually limited?

Since this isn't logged in the logs (to the best of my knowledge), I assume you can't run a report on it.

Re: Bandwidth limit per app /category

Hugo_vd_Kooij — Wed, 21 Feb 2018 10:53:21 GMT

To the best of my knowledge the fact that you use Accounting on the rule means you will have log entries that also contain information about the amount of triffic.

However this may no tell you anything about the bandwidth usage.

Re: Bandwidth limit per app /category

ovidiu_catrina — Thu, 22 Feb 2018 10:24:54 GMT

i was hope to get something like this :img

Re: Bandwidth limit per app /category

PhoneBoy — Thu, 22 Feb 2018 17:22:45 GMT

As I said, it's not something we currently log, therefore not something we can report on.

It's something we can look at adding in a later release.

Re: Bandwidth limit per app /category

ovidiu_catrina — Fri, 23 Feb 2018 09:37:33 GMT

thanks!