[c-nsp] QoS on ingress

Brian Landers brian at bluecoat93.org
Sun Sep 12 11:59:58 EDT 2010


On Sat, Sep 11, 2010 at 10:27 PM, Keegan Holley
<keegan.holley at sungard.com> wrote:

> I agree that TCP will back off if policed however if he only has 1M to work
> with he might be stuck.  I've filled up a 1M pipe with an iPhone...  If
> there are enough TCP sessions the congestion will still happen.

Agree.  Without explicit queue assignment/priority on the PE egress
interface, anything you try to do on the CE is going to be "best
effort" in terms of effectiveness.  Shaping all non-voice inbound
traffic to 90% or so of your CIR to try to protect the voice traffic
is probably about the best you can do.  A significant amount of
non-voice UDP traffic is still going to kill you, though.

B*


-- 
Brian C Landers
http://www.packetslave.com/
CCIE #23115 (R&S + Security)



More information about the cisco-nsp mailing list