1 00:00:00,210 --> 00:00:03,900 So where would you use polices and where would you use shapers? 2 00:00:04,260 --> 00:00:07,680 Polices are generally used as ingress tools. 3 00:00:07,980 --> 00:00:13,800 In other words, the traffic is dropped before it's processed so that you don't waste a valuable resources. 4 00:00:14,070 --> 00:00:19,560 If a packet is going to be dropped anyway, you might as well drop it on the ingress or incoming interface 5 00:00:19,560 --> 00:00:26,250 of a router so that you don't waste valuable bandwidth and CPU cycles to move it from one interface 6 00:00:26,250 --> 00:00:30,210 to another, do a writing lookup and so forth, and then drop the packet. 7 00:00:30,420 --> 00:00:36,720 Polices can be used on egress to control the amount of traffic sent out of an interface, but are generally 8 00:00:36,720 --> 00:00:40,470 used to enforce a traffic policy on ingress. 9 00:00:41,230 --> 00:00:47,590 As an example, your service provider may have an ingress police to ensure that you don't send too much 10 00:00:47,590 --> 00:00:48,370 traffic. 11 00:00:48,790 --> 00:00:55,060 As an example, you could have paid for 100 megabits per second internet link, but the physical interface 12 00:00:55,060 --> 00:00:58,900 that connects you to your service provider could be gigabit Ethernet. 13 00:00:59,050 --> 00:01:03,910 So to ensure that you don't transmit more than a hundred megabits per second, the service provider 14 00:01:03,910 --> 00:01:11,740 on the ingress interface on the ISP side will implement a police to drop traffic that exceeds 100 megabits 15 00:01:11,740 --> 00:01:14,690 per second when traffic is exceeded. 16 00:01:14,710 --> 00:01:19,120 The police can either drop the traffic or remark the traffic. 17 00:01:19,780 --> 00:01:25,630 The disadvantage of a police is its dropping traffic which results in TCP resents. 18 00:01:26,020 --> 00:01:30,520 TCP is designed to retransmit traffic that's been dropped. 19 00:01:30,610 --> 00:01:37,210 So when a police is dropping a lot of traffic, it causes a lot of TCP transmissions or rescinds polices. 20 00:01:37,210 --> 00:01:40,480 Don't introduce jitter or delay because they simply drop the packet. 21 00:01:40,510 --> 00:01:48,220 They don't delay it with shapers introduce delay and jitter by slowing down packets or buffering them 22 00:01:48,220 --> 00:01:50,620 for a period of time before transmitting them. 23 00:01:50,800 --> 00:01:57,100 Shapers are a lot gentler than polices, so generally they are deployed between an enterprise customer 24 00:01:57,100 --> 00:02:02,590 and the service provider to ensure that you don't exceed the contracted rate. 25 00:02:03,360 --> 00:02:10,320 Again, using the example of a customer connected to a service provider via a gigabit interface, the 26 00:02:10,320 --> 00:02:16,830 customer will slow itself down under the 100 megabits per second threshold to ensure that it doesn't 27 00:02:16,830 --> 00:02:19,980 send traffic to the service provider who will simply drop. 28 00:02:19,980 --> 00:02:27,150 The traffic shapers result in fewer TCP transmissions because they're not dropping the traffic, they 29 00:02:27,150 --> 00:02:30,330 are delaying it or slowing the traffic down. 30 00:02:30,720 --> 00:02:34,350 So in summary, policing drops or remarks. 31 00:02:34,380 --> 00:02:40,770 It doesn't buffer, it causes TCP transmissions, it doesn't introduce data and delay. 32 00:02:40,800 --> 00:02:42,990 Shippers don't drop traffic. 33 00:02:43,020 --> 00:02:44,610 They delay the traffic. 34 00:02:44,610 --> 00:02:47,940 But that can result in additional delay or jitter. 35 00:02:47,970 --> 00:02:50,400 Shaping is a lot gentler on traffic. 36 00:02:50,400 --> 00:02:51,900 Policing is very harsh. 37 00:02:51,900 --> 00:02:53,520 Causes transmissions.