Traffic Shapers - Computer Backup Traffic

[SecurityPlus]

We have situations in which computer backups transfer data from LAN to WAN. We would like for the backups to run as fast as they can using as much bandwidth as possible but not to slow down other WAN traffic. FortiOS 6.4.2

Could we accomplish this as follows:

Traffic Shapers, Type: Shared, Traffic Priority: Low

The Implicit medium traffic priority policy is the only other policy

Traffic Shaping, Source, Destination, Service set to to All

Application: the backup application

Action: Apply Shaper

Outgoing Interface: Outside

Shared Shaper

Reverse Shaper

Will this configuration allow the backup application to use the full bandwidth unless there is other traffic requiring the interface and in that case will reduce the bandwidth of the backup as necessary? I searched for other forum posts but could not find this scenario elsewhere?

[SecurityPlus]

Can anyone weigh in on the approach above? Will it give priority to non-backup traffic but allow backup traffic to use all otherwise unused bandwidth?

[mauromosc]

Hi, Have you tried to take a look on sdwan? Maybe you can achieve these goals with this feature. Also depending on the FortiGate model, you can't have QoS with hw acceleration. Regards, Mauro.

[Toshi_Esumi]

If the backup traffic caught by the shaper is the only traffic with "low" priority, yes, it would use bandwidth all other traffic didn't use. But you should simulate the situations to see if you get expected outcome. Traffic shaping is always tricky when multiple types of traffic and shapers co-exist.

[SecurityPlus]

Thank you! There is another traffic shaper with high priority traffic that affects one of the computers that gets backed up. This high priortity setting was intended for all the non-backup traffic from this computer. I had to sort the shaper regarding the low priority traffic shaper above the high priority traffic shaper so that the backup traffic got classified as low priority (based on destination) before the computer traffic got prioritized as high priority (based on computer IP address). After doing this it appears to work as intended. The backup can be running saturating the outbound traffic bandwidth yet still have users get a good speed check and quick web browsing. This testing was done with a FortiOS 6.0.10 firewall.