Rule or Layer7 Prio
-
Hi,
If have create a rule that sends HTTP Traffic to Queue named qHttp and additionally created a L7 Pattern (inside this rule) that sends rar Files to queue qArchives.
Which Queue will be taken for 1. normal HTTP Traffic and 2. rar Archive Downloads?
Or more General: Which one has the higher Priority?Thanks in advance,
redflag237
-
If you have a rule that does the HTTP (80 & 443) and L7, doesn't that rule only capture RAR archive data?
I guess you can create two rules. One for just the HTTP and one for the Layer7.
The rule that's on top will get priority in getting processed first.
My guess.
-
@kyu:
If you have a rule that does the HTTP (80 & 443) and L7, doesn't that rule only capture RAR archive data?
I guess you can create two rules. One for just the HTTP and one for the Layer7.
The rule that's on top will get priority in getting processed first.
My guess.
In L7 i can select what should happen to each of the L7 Pattern, from a custom queue to blocking. The question is really, if it is executed as an additional filter for the rule, or if it just applies the L7 Action to the matching pattern inside this rule (and let the other traffic pass).
Is adding a L7 really a filter to only match this rule on the selected L7 Elements? Can anybody confirm that? I'm confused, sorry :-)Because somewhere over the web i read about blocking rar file downloads. The information i read, was that i need to set a http pass rule and add l7 block for rar.
best regards,
redflag237 -
How about testing it out by transfering a large RAR file over to someone and see which Queue gets clogged up.