User`s guide

Chapter 10 Network QoS for vNICs 203
Example: ACL-Based Policer for 10GbE I/O Cards
An ACL-based policer sets up an ACL that matches a particular flow, then polices
that flow using QoS. For example, you can police communication between two IP
endpoints down to a specific rate. Or, you can police based on traffic type port
number (i.e., HTTP 80). ACL-based policers are supported on the 10 GE and 10-Port
GE modules only.
The following figure shows an example of limiting egress traffic. In this example,
server 1 (S1) is vNIC attached to the Oracle Fabric Interconnect. Server 2 (S2) is
Ethernet attached. The following configuration restricts (limits) all HTTP traffic
headed in the egress direction (server to network) to 100 Mbps. All traffic that is non
HTTP traffic (no ACL match) gets max bandwidth.
Note – Unlike a standard policer configuration (see “Example: vNIC Custom Policer
for a 10GbE Card” on page 199), ACL-based policing does not require QoS to be
manually assigned to a vNIC.
▼ Create ACL-Based Policer
The following example creates an ACL-based policer matching any HTTP traffic,
then rate limits that traffic down to 100 Mbps.
1. Create a named QoS policer to limit traffic to 100 Mbps:
2. Enable the QoS set and assign it to the appropriate I/O card number (“1” in this
example):
add qos network policer test/100mhttp -cbs=100m -pir=100m
set ethernet-card 1 qos -set=test