On Dec 17, 2007 9:54 AM, Jeffrey Ollie <<a href="mailto:jeff@ocjtech.us">jeff@ocjtech.us</a>> wrote:<br><div class="gmail_quote"><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
I'm curious if anyone knows of a product that will help us shape some<br>of our Internet traffic. In particular, we need something that will:<br><br>1) Handle a lot of bandwidth, at least 40Mb/s of bandwidth currently
</blockquote><div> </div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">2) Have the ability to shape traffic to particular web sites</blockquote>
<div> <br></div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">3) Time based controls (so we could limit facebook traffic during the<br>day, but open it up at night).
<br></blockquote></div><br>Very interesting question. My first thought was that I'd done this before, but I realized I hadn't. I'd merely used squid to match regex and block traffic. Your idea would require shaping based on content.
<br><br>That implies, as far as I can tell, that some proxy server would have to be used in order to shape HTTPS traffic since I know of no other way besides IP based rules, which you didn't want to do. Meaning without the client configured to use a proxy server you can't shape the https stuff (that I know of, and even them some types of proxying, like transparent proxying, don't work afaik).
<br><br>
I've never used (nor heavily investigated) shaping using a proxy server. Therefore I'm not 100% positive its possible even if you do have your clients configured for a proxy server. I'm not sure I'd be 100% comfortable managing such a proxy server if it is possible.
<br><br>This leads me to another idea, and that is a tool that will do the name -> ip mapping for you so that you can use simpler tools for your shaping. Just list a bunch of domains and let the tool create the IP based tables for your shaping solution.
<br clear="all"><br>-- <br>Matthew Nuzum<br>newz2000 on freenode