[squid-users] Can Traffic Management Settings be configured for other TCP protocols?

Yuri Voinov yvoinov at gmail.com
Mon May 9 21:31:18 UTC 2016


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
 
I'm afraid Cisco firewall is not enough here.

You need something more advanced. Like integrated service router,
i.e.2901 or 2911, or something similar. With iOS 15.5 and complete
hardware support.

10.05.16 3:15, J Green пишет:
> Here, re 'upload and download sizes', I meant the later 'dumb traffic limits'.
>
> We do have a Cisco firewall in place, and I have setup 'traffic
policing'.  However, the results are inconsistent.  Sometimes it seems
to work, other times it blocks everything, or it blocks nothing.
>
> Appreciate all the feedback, thank you all for your time.
>
> On Mon, May 9, 2016 at 12:27 PM, Yuri Voinov <yvoinov at gmail.com
<mailto:yvoinov at gmail.com>> wrote:
>
>
> For such task enough put Cisco router with TCP traffic policies .....
>
> And please - any protocol, any speed limits, any ACL's, any SLA .....
>
>
> 10.05.16 1:15, Alex Rousskov пишет:
> > On 05/09/2016 12:53 PM, Yuri Voinov wrote:
>
> >> Just to clarify. For proxying anything (protocol or service), the proxy
> >> server must be at the same time also act as the client of a protocol or
> >> service - and as a server.
>
>
> > It all depends on the definition of "upload and download sizes" in the
> > OP question. If the intent is to understand and restrict individual
> > protocol messages, then you are right. If the intent is just to limit
> > the aggregate number of TCP bytes transferred, then protocol
> > understanding (in a "transparent" setup) is not required.
>
> > Needless to say, Squid is unlikely to be the best solution for the
> > latter "dumb traffic limits" problem, but if an "all-in-one executable"
> > is a critical requirement, one can make modern Squids to limit tunneled
> > TCP traffic that it does not understand.
>
> > Alex.
>
>
> >> J Green:
> >>>> Would like to limit maximum upload and download sizes for
> >>>>       other TCP protocols:  SMB, NFS, FTP, and RDP.
> > _______________________________________________
> > squid-users mailing list
> > squid-users at lists.squid-cache.org
<mailto:squid-users at lists.squid-cache.org>
> > http://lists.squid-cache.org/listinfo/squid-users
>
>
>
>     _______________________________________________
>     squid-users mailing list
>     squid-users at lists.squid-cache.org
<mailto:squid-users at lists.squid-cache.org>
>     http://lists.squid-cache.org/listinfo/squid-users
>
>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXMQGlAAoJENNXIZxhPexGUrUIAJPB/z0efUrIg/MQNdt/rhYh
xc4S+0y1E0uDooctFOrHxsRaFq8QoegHRpAQ8EOR9jH2sTkKeLWzT7q4RGNzjVK8
Zmq/lb2W4TG4tdpfEwt07/46koLd47EIlYfmm9sqck+Lez2JgHZ9+y8Il9fbEGqY
mUL9qwNtK9Wp2VjaNMZ447oOIShZj6nDELo9raVDkknpluFl37M0WFkmShR076Rw
NvhA9pto1u+Sx9STSkFz7AgkU4vp4Nzetlqg1cjoklmQTN/iAgyQK+2FRYoYgtJO
rZxjcC1iFkTV+J0xwS9iWBfktRDTi247oLhDCxK9jL6SDhs771sGJmuGJaJ8Mnw=
=jTlc
-----END PGP SIGNATURE-----

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160510/c367046c/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0x613DEC46.asc
Type: application/pgp-keys
Size: 2437 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160510/c367046c/attachment-0001.key>


More information about the squid-users mailing list