User manual BARRACUDA BARRACUDA NG FIREWALL HOW TO TRAFFIC SHAPING REV1.1

[. . . ] How To: Traffic Shaping Barracuda NG Firewall Revision 1. 1 Barracuda Networks Inc. Winchester Blvd Campbell, CA 95008 http://www. barracuda. com Copyright Notice Copyright 2004-2010, Barracuda Networks www. barracuda. com v4. x-090623-06-1119 All rights reserved. Use of this product and this manual is subject to license. Information in this document is subject to change without notice. Trademarks Barracuda NG Firewall is a trademark of Barracuda Networks. [. . . ] In order to achieve this, open the Forwarding Rules of your forwarding firewall and create a new rule or edit an existing one. Most likely, every kind of traffic will be passed through this rule due to the fact that this is an ISP setup without restricting rules for the customers. However, it is up to you to define the rules as desired. If you want to assign specific traffic to a Shaping Connector, choose the designated Shaping Connector in the Forward Band field. All correctly introduced connectors will be shown in this list. Note: You should not forget to correctly assign the bands, otherwise auto-assigning may appear in a wrong way. 6. Active Traffic Shaping If this Traffic Shaping scenario has been configured and is up and running, the status monitor of your forwarding firewall service looks like this:. Fig. 4­28 Active Traffic Shaping 27 Example: Internet Service Provider 7. Table 4­4 Issue To Check Completion Checklist Shaping Tree created and configured?Bandwidths for Customers B and C assigned?You are done! 28 Barracuda NG Firewall - How To: Traffic Shaping Chapter 5 Example: Fast VoIP & RDP Throughput Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 Step-By-Step Guidance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 29 Example: Fast VoIP & RDP Throughput 5. 1 Overview Fig. 5­29 Mini ISP Setup Zurich HTTP Client SIP Client RDP Client Munich HQ NG Firewall RDP Client HTTP Client SIP Client HTTP Client This scenario makes use of the features, namely the setting NoDelay as Priority of a Shape Connector, and, on the other hand, Priority as the Operation Mode of a Virtual Interface. The aim of these operation modes is to guarantee the fastest possible throughput for specific traffic types. Typically, this would apply to voice-over-IP (VOIP / SIP) applications, which rely on real-time full duplex connections in order to enable smooth voice communication. Another typical example are remote desktop protocol (RDP) applications, where a fast real-time connection is also of essential importance. However, there exist different types of priority traffic. While some of them will need absolutely flawless realtime connections in order to reach a designated grade of quality, minor delays may be acceptable to others. For example, during a phone conversation, any delay will lead to interruptions and irritations in the stream of speech, therefor having a noticeable impact on the service quality. On the other hand, a few dropouts in the data stream of a remote desktop session will have no further impacts. You should carefully decide whether which of the both prioritising methods introduced in the next chapter you will use for a particular appliance. 5. 1. 1 Step-By-Step Guidance There are two different ways to assure priority passing of certain traffic through a Shaping Tree. The - as it were - old way would simply mean feeding the priority traffic directly into the root node. However, in some cases, this solution has highly visible drawbacks, especially in a more complex Shaping Tree. [. . . ] A globally valid Traffic Shaping Tree is created on this box and then assigned to the interfaces directly on the remote managed boxes. It is not necessary to create one Shaping Tree for each box. 48 Barracuda NG Firewall - How To: Traffic Shaping 7. 1. 1 Step-By-Step Guidance 1. Create the Shaping Tree for ADSL, the HQ's Regular Interface to the Internet In order to shape the traffic passed through the interface ADSL is attached to, create a new Shaping Tree for it and configure interfaces as shown below. Fig. 7­57 The Virtual Interface Dialogue Create a global Shaping Tree and set its · Tree Name to ADSL · Operation Mode to Shape · Priority Weights to 4:0:2 Fig. 7­58 The Virtual Interface Dialogue Subsequently, you create a virtual interface for the bulk traffic. [. . . ]