When deploying traffic shaping, consider the CPU resources of the system. Especially on low-end machines, shaping on highly used links may cause performance degradation, resulting in high CPU loads and reduced network connectivity. Depending on the system configuration, Barracuda Networks recommends a maximum interface shaping bandwidth of 10 MB/s on systems with a CPU clock of 800MHz or lower.
There are different ways to configure traffic shaping on the Barracuda NextGen Firewall F-Series. You can use the predefined Basic profile template or configure all settings manually (see How to Create a QoS Profile ). The step-by-step instructions provided in this article explain how to configure basic traffic shaping. The basic traffic shaping scheme employs a simple virtual tree named Default with a single virtual interface named NoDelay attached to it.
Step 1. Apply the Basic Profile Template
- Go to CONFIGURATION > Configuration Tree > Box > Traffic Shaping.
- Click Lock.
- From the Predefined Profiles list at top of the page, select Basic profile.
- Click Yes to apply the template.
- From the Select Interface list, select the interface to which you want to apply the basic profile.
- Click OK. This assigns the virtual tree to the interface.
- From the Interfaces table, double-click an interface to configure its bandwidth limit.
- In the Rate section of the Interface Tree Mapping window, select Enable Shaping and enter a limit for the inbound and outbound bandwidth.
- Click OK.
- Click Send Changes and Activate.
Step 2. Apply Traffic Shaping to Access Rules
Select the QoS Band in the Policy settings of an access or application rule.
- Go to CONFIGURATION > Configuration Tree > Box > Virtual Servers > your virtual server > Assigned Services > Firewall > Forwarding Rules.
- Click Lock.
- Create or double-click the access or application rule to which you are applying the QoS Band.
- To apply the QoS Band to an access rule:
Select the QoS Band from the QoS Band (Fwd) and QoS Band (Reply) list in the Policy section. For more information, see How to Create and Apply QoS Bands.
- To not use the QoS To apply a different QoS Band to an application rule
- Select the Change QoS Band (Fwd) check box in the Policy section and select the QoS Band from the list.
- To apply the QoS Band to an access rule:
- Click OK.
- Click Send Changes and Activate.