I have had this deployed on my home SRX to test. I used it to rate limit
p2p apps while I was working from home and it seemed to work perfectly. :)
application-traffic-control {
rate-limiters 1m {
bandwidth-limit 1048576;
burst-size-limit 1048576;
}
rule-sets torrent {
rule 1 {
match {
application [ junos:BITTRACKER junos:BITTORRENT-APPLICATION
junos:BITTORRENT-DHT junos:BITTORRENT-DHT4 junos:BITTORRENT-UDP
junos:BITTORRENT-WEB-CLIENT ];
application-group [ junos:p2p junos:p2p:file-sharing ];
}
then {
rate-limit {
client-to-server 1m;
server-to-client 1m;
loss-priority-high;
}
}
}
}
}
Then apply the rate limiter to a sec policy.
show configuration security policies from-zone trust to-zone untrust policy
scheduled-outbound
match {
source-address any;
destination-address any;
application any;
}
then {
permit {
application-services {
idp;
application-traffic-control {
rule-set torrent;
}
}
}
log {
session-close;
}
count;
}
scheduler-name office-hours;
On 12 August 2014 10:02, James Baker <ja...@jgbaker.co.nz> wrote:
> Cheers Matt; that will get me going
>
>
>
> -----Original Message-----
> From: juniper-nsp [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf
> Of Matt Bernstein via juniper-nsp
> Sent: Tuesday, 12 August 2014 4:59 p.m.
> To: juniper-nsp@puck.nether.net
> Subject: Re: [j-nsp] Junos SRX AppQos
>
> On 12/08/2014 05:51, James Baker wrote:
> > Does anyone have any docs or links to docs/blogs which give some
> examples? Or an sanitized code snippet?
> The O'Reilly is pretty good.
>
>
> http://chimera.labs.oreilly.com/books/1234000001633/ch12.html#application_quality_of_service
>
> Matt
> _______________________________________________
> juniper-nsp mailing list juniper-nsp@puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>
> _______________________________________________
> juniper-nsp mailing list juniper-nsp@puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>
_______________________________________________
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
