A few years ago we stopped trying to throttle "bad" traffic and switched to giving each user a quota of bandwidth they could use however they wanted. Along with a little user education, this kept the hogs to a minimum. We wrote our own OpenBSD/PF system to track heavy users and throttle them based on total bandwidth consumption. NetEqualizer (http://netequalizer.com/) is a commercial product that does much the same thing. I've never used it, but it has a following in the edu space because it's cheaper than other L7 shapers and doesn't require a lot of tuning.
We're a school, so this may not fit at an organization where there are clearly-defined business apps that need access and other items that don't. I'm not sure if NetEqualizer lets you exempt business-critical traffic from shaping. However, if you don't want to spend all day trying to classify traffic, this might work for you. We actually haven't used our home-grown system recently because our pipe got much cheaper and we could afford to just buy more bandwidth for the students. Once we stop keeping up with demand, we'll probably look at turning shaping back on again... Jason -- Jason Healy | jhe...@logn.net | http://www.logn.net/ _______________________________________________ Tech mailing list Tech@lists.lopsa.org https://lists.lopsa.org/cgi-bin/mailman/listinfo/tech This list provided by the League of Professional System Administrators http://lopsa.org/