Figure 362 Lan1 To Wan Connection And Packet Directions - ZyXEL Communications ZyWALL USG 100 Series User Manual

The application patrol bandwidth management is more flexible and powerful than the
bandwidth management in policy routes. Application patrol controls TCP and UDP traffic.
Use policy routes to manage other types of traffic (like ICMP).
Bandwidth management in policy routes has priority over application patrol
bandwidth management. It is recommended to use application patrol instead
of policy routes to manage the bandwidth of TCP and UDP traffic.
Connection and Packet Directions
Application patrol looks at the connection direction, that is from which zone the connection
was initiated and to which zone the connection is going.
A connection has outbound and inbound packet flows. The ZyWALL controls the bandwidth
of traffic of each flow as it is going out through an interface or VPN tunnel.
• The outbound traffic flows from the connection initiator to the connection responder.
• The inbound traffic flows from the connection responder to the connection initiator.
For example, a LAN1 to WAN connection is initiated from LAN1 and goes to the WAN.
• Outbound traffic goes from a LAN1 zone device to a WAN zone device. Bandwidth
management is applied before sending the packets out a WAN zone interface on the
ZyWALL.
• Inbound traffic comes back from the WAN zone device to the LAN1 zone device.
Bandwidth management is applied before sending the traffic out a LAN1 zone interface.

Figure 362 LAN1 to WAN Connection and Packet Directions

Outbound and Inbound Bandwidth Limits
You can limit an application's outbound or inbound bandwidth. This limit keeps the traffic
from using up too much of the out-going interface's bandwidth. This way you can make sure
there is bandwidth for other applications. When you apply a bandwidth limit to outbound or
inbound traffic, each member of the out-going zone can send up to the limit. Take a LAN1 to
WAN policy for example.
• Outbound traffic is limited to 200 kbps. The connection initiator is on LAN1 so outbound
means the traffic traveling from LAN1 to the WAN. Each of the WAN zone's two
interfaces can send the limit of 200 kbps of traffic.
ZyWALL USG 100/200 Series User's Guide
Connection
1
Outbound
BWM
Chapter 28 Application Patrol
BWM
Inbound
455