Skip to main content
CvB
New Member
December 2, 2021
Question

Traffic Shaping Policy, Shared Shaper and Per-IP Shaper

  • December 2, 2021
  • 2 replies
  • 2566 views

Hi community,

 

Is it possible to use a shared shaper and a per-ip shaper in the same traffic shaping policy?

 

For example:

I want to create a shared shaper for youtube with maximum bandwith of 100mbits.

But I also want to create a per-ip shaper for youtube with a maximum bandwith of 2mbits, that only each client can use maximum 2 mbits for youtube.

 

Regards

Chris

 

 

2 replies

bpozdena_FTNT
Staff
Staff
December 2, 2021

Hi Chris,

 

assuming you do not have a bunch of Youtubers in your network :) and you only want to shape streams from from Youtube (not uploading of videos), then you will need to create a shaping policy for Youtube application with reversed 100Mbps shaper and 2Mbps per-ip shaper .  

 

Example of shaping policy that should work for your needs:

config firewall shaping-policy     edit 0         set name "shape_youtube"         set service "ALL"         set application 31077                       # Youtube app ID         set dstintf <your_WAN_port>                 # Interface(s) towards your ISP(s)         set traffic-shaper-reverse <shaper_name>    # Your 100Mbps shared shaper         set per-ip-shaper <shaper_name>             # Your 2Mbps per-ip shaper         set srcaddr "all"         set dstaddr "all"     next end

 

Note: For application-based shaping policy to work correctly, ensure your firewall policy has application control enabled. 

pavankr5
Staff
Staff
July 21, 2023

Hello @CvB,

 

You can either use a shared shaper with a maximum bandwidth of 100 Mbps for all YouTube traffic, which would be shared among all clients accessing YouTube, or you can use a per-IP shaper to limit each client's YouTube bandwidth to 2 Mbps. However, you cannot combine both methods within the same traffic shaping policy.

 

Thanks

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!