Pipe Rules Determine Pipe Usage - D-Link DFL-260E User Manual

10.1.2. Traffic Shaping in
NetDefendOS
Pipe Rules
One or more Pipe Rules make up the NetDefendOS Pipe Rule set which determine what traffic will
flow through which pipes.
Each pipe rule is defined like other NetDefendOS secuirity policies: by specifying the
source/destination interface/network as well as the service to which the rule is to apply. Once a new
connection is permitted by the IP rule set, the pipe rule set is then checked for any matching pipe
rules.
Pipe rules are checked in the same way as IP rules, by going from top to bottom (first to last) in the
rule set. The first matching rule, if any, decides if the connection is subject to traffic shaping. Keep
in mind that any connection that does not trigger a pipe rule will not be subject to traffic shaping and
could potentially use as much bandwidth as it wants.
Pipe Rule Chains
When a pipe rule is defined, the pipes to be used with that rule are also specified and they are placed
into one of two lists in the pipe rule. These lists are:
• The Forward Chain
These are the pipe or pipes that will be used for outgoing (leaving) traffic from the NetDefend
Firewall. One, none or a series of pipes may be specified.
• The Return Chain
These are the pipe or pipes that will be used for incoming (arriving) traffic. One, none or a series
of pipes may be specified.
The pipes that are to be used are specified in a pipe list. If only one pipe is specified then that is the
pipe whose characteristics will be applied to the traffic. If a series of pipes are specified then these
will form a Chain of pipes through which traffic will pass. A chain can be made up of a maximum
Note: No pipe rules are defined by default
The rule set for pipe rules is initially empty with no rules being defined by default. At
least one rule must be created for traffic shaping to begin to function.
Figure 10.1. Pipe Rules Determine Pipe Usage
453
Chapter 10. Traffic Management