Well, TCP/IP controls will start slowing the connection down if packets are getting through, but with latency... (i.e. que based head-end control).
Scott -----Original Message----- From: Roger Howard <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Date: Mon, 10 Nov 2003 10:55:46 -0600 Subject: Re: [smartBridges] sB Network Issue > It will help to some degree, but if someone is spewing out ICMP echo > requests then it will tie up the access point, even if the access point > is > just dropping all that data. Bandwidth shaping at the client side would > mean > they could only tie up 512k of bandwidth (or whatever their > subscription > level is) and everyone else on the access point would still be > functional. > > Thanks, > Roger > ----- Original Message ----- > From: "sB Tech Support" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Monday, November 10, 2003 10:33 AM > Subject: RE: [smartBridges] sB Network Issue > > > > Nexus products will give you some kind of IP or protocol filtering > > capability so you configure it to block certain ports or IP address. > > Hope this will help you. > > > > Alex > > sB Tech Support > > [EMAIL PROTECTED] > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Roger Howard > > Sent: Monday, November 10, 2003 1:05 PM > > To: [EMAIL PROTECTED] > > Subject: [smartBridges] sB Network Issue > > > > One of the problems I seem to be facing frequently these days is that > a > > single customer can get a virus and generate tremendous amounts of > > traffic, > > which brings the whole network to a crawl. Normally bandwidth shaping > at > > the > > NOC will limit the amount the customer can transmit, due to the > > Transmission > > Control Protocol part of TCP/IP. But if it is something like the > > Nachi.worm > > it is ping packets which do not have transmission control and can be > > spewed > > out at tremendous rates that no bandwidth shaper can control. So > what's > > the > > solution to stop these slowdowns and outages caused by these viruses? > > > > A) Reduce the customer's functionality by insisting they use a router > or > > firewall. > > B) Have bandwidth shaping at the CPE. > > > > Personally I prefer B.... but that seems to be expensive, usually. > > Smartbridges, it might be something you can include in your Nexus > > product? > > > > Thanks, > > Roger > > > > The PART-15.ORG smartBridges Discussion List > > To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe > > smartBridges <yournickname> > > To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe > > smartBridges) > > Archives: http://archives.part-15.org > > > > The PART-15.ORG smartBridges Discussion List > > To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe > smartBridges <yournickname> > > To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe > smartBridges) > > Archives: http://archives.part-15.org > > The PART-15.ORG smartBridges Discussion List > To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe > smartBridges <yournickname> > To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe > smartBridges) > Archives: http://archives.part-15.org The PART-15.ORG smartBridges Discussion List To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe smartBridges <yournickname> To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe smartBridges) Archives: http://archives.part-15.org
