H3C Technologies H3C SecBlade IPS Cards - Manual (Page 180)

18-1
18
Bandwidth Management
Overview
Introduction to Bandwidth Management
By purposes, network traffic can be divided into multiple service types, such as the E-mail service and
VoIP service. Bandwidth management refers to performing different management and control behaviors
for different service types. Therefore, bandwidth management includes two major components: service
and service-specific control behavior.
z A service can be system-defined or user-defined. All services are organized into a tree, which is
called a service tree. A node of the service tree represents a service.
z The device determines the service type of a received packet by its application protocol and IP
address, and then performs the corresponding action (block or rate-limit) for the packet according
to the user-defined rule for the service.
z Additionally, you can configure per-segment bandwidth management policies so that you can more
flexibly control the network traffic.
By performing flexible bandwidth controls for applications and limiting non-critical applications,
bandwidth management guarantees bandwidth for mission-critical applications of the user network.
Introduction to Services
A service is a set of match rules. All network behaviors conforming to the match rules belong to the
service.
A match rule consists of protocol, node, and direction, where protocol indicates the network protocol,
node indicates a certain device or devices in a certain network segment, and direction indicates the
probe direction. The three factors together determine that packets of a certain protocol sent or received
by a specific device (or devices in the specific network segment) match the rule.
The service itself does not manage or control the network. A service can be referenced by a policy in the
system. Then, the policy cooperates with the service to manage and control the network.
In the system, services are organized into a tree with only one root node. Except the root node, any
other service can be appended to another service, with the first service as the child service and the
second one as the father service.
Configuring Bandwidth Management
Configuration Task List
Perform the steps in Table 18-1 to configure bandwidth management.