Cipafilter Documentation - Bandwidth Control
Posted by Jim Giseburt, Last modified by Jim Giseburt on 11 April 2017 03:32 PM
Bandwidth Control prevents heavy bandwidth users from consuming bandwidth capacity to the detriment of other activities on your network. Three modes are available: Disabled, Automatic, and Advanced DPI.
The Disabled control method disables bandwidth prioritization entirely, allowing traffic to flow through the filter as-is. This method is useful for troubleshooting and for networks with a third-party bandwidth-management product installed upstream of the filter.
The Automatic control method prioritizes traffic using a set of built-in rules. These rules are designed to fit the needs of most networks while requiring minimal configuration and maintenance.
The Advanced DPI control method is Cipafilter's flagship bandwidth-control solution. It allows administrators to customize traffic prioritization according to the unique needs of their network via a series of user-configurable rules.
Rules for this mode are matched from top to bottom (like the Firewall page) and may be applied to both subnets and filter groups. Additional conditions may be applied to prioritize only specific types of traffic:
Note that a particular traffic event may match multiple conditions; for example, downloading a file from a Google site could match the Domain "google.com", the Application type "Google", the Application type "Generic: Download", the TCP Port "443", and so on. As previously mentioned, the first rule (from the top) which matches the traffic will apply.
Each rule may place traffic into one of the following Priority bands:
When Automatic or Advanced DPI is selected, a Throughput Configuration table appears containing each of the filter's externally facing interfaces (when Interface Bridging is enabled, only the primary interface is shown). The maximum upload and download throughputs (in Mbps) should be supplied for each of these interfaces. These values can be obtained from your provider. It is critical that this data is accurate, as the Bandwidth Control system will not function properly otherwise.