Rate Limiting - Will Content Engine 590 solve my problem?

We have a Cache Engine 550 deployed in our network which is great for reducing traffic on the Link to the Internet, however I have now run into a little problem with the device as we are now trying to implement Bandwidth Shaping using the existing Cisco infrastructure and thus the Cisco IOS.
One of the IOS features concerned is Committed Access Rate (CAR).
We would like to do some traffic shaping according to certain IP Protocols such as FTP, HTTP as well as rate limiting certain of our customers (IP Blocks) so that they dont saturate the Serial link to our ISP.
The problem we have is that the Cache Engine 550 replaces the original requestors IP with its own as it (the CE) now takes over as the requestor to the Internet thus we have all HTTP traffic via our ISP having the source as that of the Cache Engine.
Due to this we cannot Rate-Limit a particular customer (IP range).
Question-------
Does the Content Engine 590 (ACNS, ICDN) enable me to complete my task and control the Serial connection the way I would like to?
Can I do a sort of IP Spoofing so that the original IP is still in place, but the Content Engine still does its job of Caching?
I have already looked at the Packeteer unfortunately it only has Ethernet ports.
The WiseWan 401 with HSSI port looked promising, but I feel that even though it will do great shaping and graphs it will still not solve the problem of a saturated link upstream to the ISP (from the boxes point of view), I will still sit with packets being dropped and thus bandwidth wasted.
Anyone out there with any other solution?
Thanks in advance.
Lutz.

Hi,
We have just implemented IP spoofing in version 4.2 of ACNS code. (Caching) which will only run on a 590/560/507/7320 cache.
Version 4.2 sould be available at the end of July early August. This will slove you problem with identifing traffic to rate limit.
Cheers
Phil

Similar Messages

Content engine 590

trying to connect a content engine 590 to a cisco router which will have web-cache enabled.
The diagram is like this: pc (lan)- fa0/0router-isp. the engine is on the same lan of fa0/0.
One question bother me is the keyword "in" and "out" from ip wccp web-cache redirected in /out. Noticed new version supports the "in"option. Little confusion about the "in" and "out". Does "out" mean : if the pc send http via fa0/0 to router, since the keyword "out" the router will redirect the http out to the fa0/0 to engine? then keyword "in" is useless. Or the other way,"in" means allow incoming traffic from fa0/0 to be redirected? Confused.
Hope to get a good explanation here. Thanks very much.

in and out tells the router where to intercept the HTTP request from the client.
So, you can intercept on inbound - incoming interface - interface where traffic enters the router. This is the "IN" keyword.
You can also intercept it on outbound - outgoing interface - interface where traffic is normally forwarded by the router. This is the "OUT" keyword.
In your case you want the 'in' on interface fa0/0.
One reason to go for 'in' is much better performance than out.
[but you could do out on the serial interface going to your isp]
If the cache is on the same interface as the clients, you need the command 'ip route-cache same-interface' on interface fa0/0 to permit traffic to be redirected to the cache correctly.
Regards,
Gilles.

We live in an old Victorian House and have virtually no connectivity on the second or third floor using a Linksys System, will the Apple Aiorport solve thge problem ? do you need sattelite stations on each floor?

Any advice on Airport solving our second and third floor WIFI connectivity problems welcomed, do we need sattelite stations, ?? do not mind buying the system if it works?

......will the Apple Airport solve the problem?
The broadcast power of all wireless routers is controlled by law, so as you might imagine, devices from varying manufactureres tend to perform about the same. It is very unlikely that an Apple AirPort router would perform significantly better...or worse...than the Linksys device that you have now.
do we need satttelite stations?
Yes, probably at least one per floor and possibly more, depending on the thickness of the walls in the areas where a wireless signal will be needed. Since you already have a Linksys router, and it is always best to use products from the same manufacturer on a wireless network, it would probably make sense to check with Linksys to see what they suggest as additions to your current router.
It would be a excellent idea to have an IT professional come out and survey the house and take some measurements with test equipment to propose a system that is right for your needs. That will likely save a lot of headaches (and money) down the road.

Will a power regulator solve my problem?

Hi! I have a long story to tell, put please be patient as I hope someone will be able to tell me if there is a problem with my power. I have a G5 and I run Final Cut Pro on it. One day, the computer worked fine; the next day, the display would not come on. I hooked it up to an old PC monitor and it worked. I tried various different outlets in my home; I even tried hooking the computer to one outlet and the display to an outlet on a separae circuit breaker but still it did not work. I drove the whole system to an Apple store 1 hour away. Everything worked perfectly. When I returned home, nothing worked. I took it to a friend's house 15 minutes away and still no results. Apple support suggested that it was the display adapter box, or that a wire was jiggled into place on the way to the stoe and then jiggled back out on the way home. Unlikely. Anyway, they sent a new display adapter and now the display works fine. No one, though, can explain why it worked at the store and not at my home. All the connections and equipment were the same. I brought it with me to Pittsburgh, PA (8 hours away)in the hopes that someone at the store where I purchased it could help me, but there was no need as it worked like a dream in that location. When I returned, however, I now have trouble starting my G5 (first no start up chimes; then chimes but no display, and finally the display will come but it freezes up, and finally it usually works). Today, it has been constantly freezing up (in less than 5 minutes its frozen). A friend suggested that it might be the power coming into the house and said that there are battery back-up units you can buy that regulate the flow of power. Will such a device help solve my problem? Thanks for your patience!

ok,I think one of your problems could be the battery on the motherboard,when left for long periods of time this battery can drain and cause problems,if you registered your applecare and are under warranty I think you can have this replaced,if not you can purchase a battery from macsales.com,the batery is $5 plus the shipping.
You should also get a ups,with a rating of 1000 to 1500.I have a apc 1000 rated supply for my rig.A computer's harddrive can suffer corruption of data during a brown out.
Other than that the only thing you could do is download a utility called mem test from versiontracker.com to check your current ram.
Reseating the graphics card could also help.
If none of the above works call applecare.

Content Engine and L4 Switches

I am network administrator in a big company, the case is as follows:
I have a new Content Engine 590 and I want not to use wccp, I will buy a new cisco L4 switch and want to use it with the engine, some one told me that it is not supported by my engine, is that true or not???
I have a cisco router and I can use wccp but papers from different web sites writes that L4 switching performance is better, is that true???
thanks
A. F.

The feature is code-specific, and the content engine will support L4 switch forwarding. You might want to look at this document to see the sample configuration for this. If you scroll passed the CSS config you will see what the CE configuration will look like.
http://www.cisco.com/warp/public/117/CSS_CEreverseproxy.html
If you weren't interested inL3 WCCP on your gateway router and wanted performance, you might want to look into the L2/mac re-write redirections you can do with a Cat 6K and a CE:
http://www.cisco.com/warp/customer/117/wccp_redirects.html
Cheers,
Perry.

EMAIL RATE LIMITATION error msg

I sent an email to my sis [whom I email on a regular basis] and 3 days later it came back undelivered with the following message:
Temporary error returned by SMTP partner.
smtp;421 RP-001 The mail server IP connecting to Windows Live Hotmail server has exceeded the rate limit allowed.
Reason for rate limitation is related to IP/domain reputation problems.
Does this mean I might have a virus that's using my email client to spam other people? What does it mean?

A valid email address should have the form "[email protected]" with only one "@" character and no spaces.

Does restoring your iPod solve the problem with the updater?

I have a fourth generation iPod and I downloaded the 10-12-2005 updater. Since then my click wheel will not work, but all the buttons on my iPod still work. I have looked through the discussions and many other people have this same problem, but i have not found any solution. Will restoring my iPod solve this problem? I want to be sure before I erase everything.

The music will come of your iPod but STAY on your computer. Documents that are on your iPod should be backed up because they will be deleted as well. Check the link below if you need more help.
http://docs.info.apple.com/article.html?artnum=60983

Content Engine Problem

Dear All,
My apologies if this posting is on the wrong board.
I've a problem with our content engine returning an error of:
"Tre reply from server is not valid"
The URL of the site is http://hiring.monster.co.uk/jobs/createtitle.aspx?mode=qb.
I've attached a screenshot of the error message.
Any advice or help would be greatly appreciated.
Thank you in advance.
Sinh

This symptom is observed on a router on which Web Cache
Communication Protocol (WCCP) is enabled and Cisco Express Forwarding (CEF)
switching is disabled. If the caches are Cisco caches, they will be running
software prior to ACNS 4.2.5.
solution: Ensure that CEF switching is enabled on the router. If this is not possible, the impact of the problem on the cache will be minimized if the authentication bypass function is disabled.also try upgrading IOS to 12.1(18.01)E which may solve the issue.

Content Engine and PHP WebSites

Hi,
I have Content Engines in a transparent caching scenario. The HTPP traffic being redirected to the CEs are from squid proxies.
Sometimes, for php written sites, when the client tries to access the website or a particular link in a website, instead of getting the site content he gets a popup window asking if he wants to save the content or cancel the operation.
I noticed that this problem does not happen if I force the client browsers to use HTTP1.1 through proxy connections or if ... I clear the cache content (the content engine content).
If I access these sites using a dial-up line this problem doesn't happen. Only from the customer network, where I deployed the transparent caching solution does this happen.
Does anyone have a clue regarding this issue?
Thanks in advance for your attention.
Regards,
Ricardo

Thanks for your reply.
I do not have any rules applied on the CE configuration.
After looking to some sniffer traces I took I suspect that my problem is related with the fact that I have requests made with browsers configured for HTTPv1.0 through proxy connections and others HTTPv1.1 through proxy connections.
When a client browser makes the request using HTTPv1.1 through proxy connections the content will be cached in encoded gzip format.
At a later time when another client, this time using HTTPv1.0 through proxy connections, tries to access the same content the content engine will deliver it encoded ... but the browser does not support it, and a pop-up window appears asking if the user wants to save the content.
So, now I suspect that this has nothing to do with the site itself but only with the requests and responses.
The clients are behind squid proxies.
It is the traffic originated by the squid proxy that is being redirect trough WCCP to the content engine.
I will do additional tests and try to find a way to solve this issue.
Once again Thanks for your reply.
I've you have any additional comments, feel free!
I need it :)
Ricardo

Major bug in SMTP rate-limiting implementation

I use my home computer to, among other things, host a mailing-list for a fan-club of a contemporary Russian poet. The total list of subscribers is about 40 people and messages are, on average, rare.
However, when a discussion picks up, the number of e-mails can briefly spike easily exceeding Verizon's "you must be spamming" threshold. Imagine: one person asks a question and two others respond. Both the question and the responses get sent to the list, so that's 3x40=120 e-mails. If the discussion gets any longer, the e-mail account gets suspended for several days for exceeding the quota...
I understand, why Verizon rate-limits the outgoing e-mail sending and don't object to it in principle. However, the current implementation has a major flaw. When the threshold is exceeded, instead of blocking all subsequent messages with a permanent error (5xx in SMTP-speak), the server ought to issue a temporary failure (4xx in SMTP-speak).
This would block any spam-bots just as effectively, but allow legitimate messages to be properly queued by the sender's computers for resending. The 5xx code signals a permanent error so instead of being queued, the innocent message is suddenly bounced.
A friend of mine is an RCN-subscriber and we know, that RCN implements rate-limiting exactly this way: if you are sending "too much", your messages will start being temporarily rejected for a while.
Solved!
Go to Solution.

Anthony, this is not a "disagreement" -- I'm pointing out a bug. The bug manifested itself with the following two problems:
Although none of the e-mails sent by my computer were spam, I was "identified" as a spammer and my access to SMTP was suspended for days. For no good reason.
Even if it were possible to appeal such automatic verdict (and I did try to talk to a customer support representative), permanent rejections in the case of a temporary error are wrong -- and in violation of SMTP specifications.
I did post the same text under the "New Ideas", but I don't think, "new idea" is the good place for this. I'm not suggesting a new service, but demanding a fix to the existing one.

WLC - Rate-limiting with QoS Roles

We have a large number of locations that we would like to deploy the 2100 series wireless controllers. Among other things, we would like to provide generic rate-limiting to all users(per-user bandwidth limits). This is a hospitality guest access environment and content filtering is really not a concern. We would, however, like to prevent one or a few users from saturating the circuit at the expense of other users. It looks like the WLCs can handle this with a QoS Profile assigned to the guest wlan and bandwidth-limiting QoS Roles applied to each user. The issue we may run into is web-authentication needs to be disabled. There is another device on these locations that will be providing those services.
Is it possible to apply a QoS Role by default to all users who associate to a controller without authentication? Also, if anyone has attempted this design model I would greatly appreciate some input on any unexpected or undesirable results you may have noticed.
I appreciate everyones help.

Thanks so much for such a quick response. I may be misunderstanding some of the documentation and would really appreciate some clarity. I am understanding a QoS Profile to be applied to one or more WLANs and all user traffic from clients of those WLANs will fall under the qos policy as a group(bandwidth limitations would be applied to all of the user traffic combined). For example, a profile capping downstream bandwidth at 1544kbps would limit all user traffic from all of the clients associated to that ssid at 1544kbps. If we were to assume some degree of fair bandwidth distribution and there are 10 users receiving traffic at a given time, then each user would receive no more than 154.4kbps. Or, are QoS Profiles actual templates that are applied to each user that associates to that ssid? For instance, if we consider a profile capping 1544kbps downstream applied to a WLAN with 10 users associated. Each user would be able to download up to 1544kbps and the full bandwidth usage for that WLAN would be 15440kbps.
Thanks again for your help.

When i play back an mp3 dj mix i,ve burn,t to cd in my car when i turn the engine of and then restart the car the cd starts back from the beginning how do i solve this problem so that when i turn the engine on end off the cd plays from the same place

when i play back an mp3 dj mix i,ve burn,t to cd in my car when i turn the engine of and then restart the car the cd starts back from the beginning how do i solve this problem so that when i turn the engine on end off the cd plays from the same place it did before i turned the engine off

It could be that the CD player will only playback "Redbook" CD's from the previous position.
And starts mp3 type CD's from the beginnig.
However.. it's not Logic related.
pancenter-

The message cannot be seen on incoming emails. I can only view the message if I click on reply. Also any links attached to email will not open. I have tried everything to solve the problem but not able to.

A message cannot be seen on my incoming emails. I can only view the message if I click on reply. Also any links attached to email will not open. I have tried everything to solve the problem but not able to.

Try closing the Mail app completely and see if it works properly when you re-open the app : from the home screen (i.e. not with the Mail app 'open' on-screen) double-click the home button to bring up the taskbar, then press and hold any of the apps on the taskbar for a couple of seconds or so until they start shaking, then press the '-' in the top left of the Mail app to close it, and touch any part of the screen above the taskbar so as to stop the shaking and close the taskbar.
If that doesn't work also do a reset : press and hold both the sleep and home buttons for about 10 to 15 seconds (ignore the red slider), after which the Apple logo should appear - you won't lose any content, it's the iPad equivalent of a reboot.

My iPad is locked up and has a apple and a bar under it on the screan and it will not turn on or off. Anyone know how to solve this problem?

My iPad is locked up and has a apple and a bar under it on the screen and it will not turn on or off. Anyone know how to solve this problem?

Have you tried a reset ? Press and hold both the sleep and home buttons for about 10 to 15 seconds (ignore the red slider if it appears), after which the Apple logo should appear - you won't lose any content, it's the iPad equivalent of a reboot.

If I have converted my purchased iTunes songs to a lower bit rate what will happen when I join iTunes match? Will they match up or will these be stored as duplicates of the same song?

If I have converted my purchased iTunes songs to a lower bit rate what will happen when I join iTunes match? Will they match up or will these be stored as duplicates of the same song?
I ask because I primarily use my work laptop which has limited space so I usually convert my purchases to 160k from 256k in order to save space. I want to sign up for iTunes Match but I'd like to know before I do so I can understand how I will have to set up my library.

crichton007 wrote:
What I may do is start a brand new library there, copy my tracks from my work laptop using Home Share and then the script to get things in sync before starting over again there too.
Why create a new library? Just add the tracks from the laptop to the existing library on the Mac.
crichton007 wrote:
I was just hoping to hear definitively whether or not there was some sort of intelligence built into iTunes Match that would match these up...
How do you mean? If you down-convert purchased tracks you've fundamentally changed the files so iTunes can no longer recoginize them as "purchased." And, indeed, they no longer are since they are brand new files. Of course these new files will only be "matched" or "uploaded."

Rate Limiting - Will Content Engine 590 solve my problem?

Similar Messages

Maybe you are looking for