Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

QoS with non-HTTP traffic on port 80

Hi,

Does anyone know if with a Cisco ASA it's possible to create a policy which inspects non-HTTP traffic on port 80, and then create a class-map to rate limit matching traffic?

I've seen the http-map command - however port-misuse doesn't appear to be granular enough to match traffic other than P2P and IM.

Thanks

Everyone's tags (3)
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: QoS with non-HTTP traffic on port 80

Jake,

You cannot do that. You cannot priority queue only specific HTTP commands etc. You can block reset erc based on HHTP attributes, but for LLQ (QoS), you need to match on general criteria like (all port 80 etc).

I hope it is clear.

PK

5 REPLIES
Cisco Employee

Re: QoS with non-HTTP traffic on port 80

Hello,

Thanks for posting, what is the final pusrpose of this configuration? If we create a class map to rate limit port 80, it will do port 80 regardless of the traffic that comes on that port? Is it for any specific l7 kind of traffic?

Let me know.

Mike

Mike
New Member

Re: QoS with non-HTTP traffic on port 80

Hi Mike,

The purpose of the configuration will be to shape - but not block - non-HTTP TCP port 80 traffic. Here's an example:


Data is received on an interface, and then processed as follows

HTTP GET, POST, HEAD etc  -----> class-map with priority bandwidth allocated and placed in a low latency queue.

Application X, uses TCP 80     -----> class-map fair queue (best effort)

Both class-maps to be applied to a policy-map, and then on the interface.

Jake

Cisco Employee

Re: QoS with non-HTTP traffic on port 80

Jake,

You cannot do that. You cannot priority queue only specific HTTP commands etc. You can block reset erc based on HHTP attributes, but for LLQ (QoS), you need to match on general criteria like (all port 80 etc).

I hope it is clear.

PK

New Member

Re: QoS with non-HTTP traffic on port 80

I thought as much.

Thanks for your time anyway.

Cisco Employee

Re: QoS with non-HTTP traffic on port 80

Take care,

PK

1411
Views
0
Helpful
5
Replies