topic Re: How to limit youtube with QoS max bandwidth? in Next-Generation Firewall Discussions

How to limit youtube with QoS max bandwidth?

I.Satyabudi — Mon, 16 Oct 2023 04:29:54 GMT

Hi experts,

Palo alto qos is my first time.

So i have a task to limit maximum bw for youtube in my company is just 10 MB.

Can i assume to config :

guarantee bw : 0

max bw : 10

I assume with that config, i didn't reserved any bw for youtube but if youtube reach more than 10 MB, palo will drop the traffict, is that right?

I do this because youtube consume a lot of BW, and youtube is not essential apps for my company, it is juft for entertaintemnt purpose, we need to limit it.

Any concern if i put max BW become 10 MB? I'm affraid this max BW of 10 MB will apply to all destination.

Re: How to limit youtube with QoS max bandwidth?

reaper — Mon, 16 Oct 2023 11:23:02 GMT

you'll need to create a QoS rule (in the QoS policy) so youtube is assigned a class

The default class for all traffic is class4, so if you create a a profile set the 'Max' to for example class 8

Then create a QoS rule trust to untrust, youtube class 8

Lastly, attach the QoS profile to the trust interface (QoS is applied on the egress, so 'downloads' are limited on the internal interface, 'uploads' are limited via the external interface)

Re: How to limit youtube with QoS max bandwidth?

I.Satyabudi — Mon, 16 Oct 2023 11:31:50 GMT

Thank you for coming my thread sir. Realy appreciate it.

For qos class 8 for youtube as you mention, to limit youtube only 10 mb max, this number is correct ?

guarantee bw : 0

max bw : 10

Re: How to limit youtube with QoS max bandwidth?

reaper — Mon, 23 Oct 2023 07:58:44 GMT

you decide what the max bandwidth is for a certain class. this is a limitation for the entire class, so if you set class 8 to 10 mbps, and 1 user is using youtube, he will have good performance. if 50 users start viewing youtube, they'll need to share that 10mbps

if you take a look at my example below, i have 1gbps available and class1 is guaranteed 200mbps. Class5 is limited to 50mbps because i don't want these applications using much bandwidth. Class5 has no guarantee so if all classes are trying to use 1000mbps, they will need to 'fight' for the resource except for class1 that is guaranteed 200mbps (so the surplus is 800mbps to fight for)

Class4 has no configuration, so it will be allowed full use of the 1000mbps as long as there's no class1 sessions. If class1 uses it's 200mbps, class4 will only have access to 800mbps