Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
SecurityPlus
Contributor II

Traffic Shapers - Computer Backup Traffic

We have situations in which computer backups transfer data from LAN to WAN. We would like for the backups to run as fast as they can using as much bandwidth as possible but not to slow down other WAN traffic. FortiOS 6.4.2

 

Could we accomplish this as follows:

 

Traffic Shapers, Type: Shared, Traffic Priority: Low

The Implicit medium traffic priority policy is the only other policy

 

Traffic Shaping, Source, Destination, Service set to to All

Application: the backup application

Action: Apply Shaper

Outgoing Interface: Outside

Shared Shaper

Reverse Shaper

 

Will this configuration allow the backup application to use the full bandwidth unless there is other traffic requiring the interface and in that case will reduce the bandwidth of the backup as necessary? I searched for other forum posts but could not find this scenario elsewhere?

4 REPLIES 4
SecurityPlus
Contributor II

Can anyone weigh in on the approach above? Will it give priority to non-backup traffic but allow backup traffic to use all otherwise unused bandwidth?

mauromosc

Hi, Have you tried to take a look on sdwan? Maybe you can achieve these goals with this feature. Also depending on the FortiGate model, you can't have QoS with hw acceleration. Regards, Mauro.
Toshi_Esumi
Esteemed Contributor III

If the backup traffic caught by the shaper is the only traffic with "low" priority, yes, it would use bandwidth all other traffic didn't use. But you should simulate the situations to see if you get expected outcome. Traffic shaping is always tricky when multiple types of traffic and shapers co-exist.

SecurityPlus

Thank you! There is another traffic shaper with high priority traffic that affects one of the computers that gets backed up. This high priortity setting was intended for all the non-backup traffic from this computer. I had to sort the shaper regarding the low priority traffic shaper above the high priority traffic shaper so that the backup traffic got classified as low priority (based on destination) before the computer traffic got prioritized as high priority (based on computer IP address). After doing this it appears to work as intended. The backup can be running saturating the outbound traffic bandwidth yet still have users get a good speed check and quick web browsing. This testing was done with a FortiOS 6.0.10 firewall.

Labels
Top Kudoed Authors