Configuring QoS, Path Selection, and Hybrid Networking : Inbound QoS
  
Inbound QoS
You configure inbound QoS in the Networking > Network Services: Quality of Service page. RiOS 9.0 provides feature parity between outbound and inbound QoS.
Inbound QoS allocates bandwidth and prioritizes traffic flowing into the LAN network behind the appliance. Inbound QoS provides the benefits of QoS for environments that cannot meet their QoS requirements with outbound QoS.
Some examples of environments that can benefit from inbound QoS are:
•  A deployment that does not have an appliance located at the traffic source (for example, the traffic comes from the Internet, or from servers at a site without a SteelFusion Edge or a SteelHead).
Figure: Guarantee bandwidth for incoming traffic
•  A deployment that has multiple appliances located at the traffic source (for example, behind an Interceptor cluster). The appliances do not share bandwidth information with each other. As a result, they can overwhelm the branch office site at the remote location.
Figure: Data center with multiple SteelHeads in a cluster
•  A branch office receiving data from multiple data centers (either with or without SteelHeads). Because the two data centers do not coordinate the amount of bandwidth sent to the branch office, they can overwhelm the link at the branch office, causing degraded performance.
Figure: Branch office that receives data from multiple data centers
Configuring inbound QoS focuses on prioritizing types of traffic using rules and classes just like outbound QoS. The inbound configuration is separate from the outbound configuration. You define the applications on the local network and then create their corresponding shaping policies.
Figure: Inbound QoS overview
Inbound QoS applies the HFSC shaping policies to the ingress traffic. Applying policies to the ingress traffic addresses environments in which bandwidth constraints exist at the downstream location. When this occurs, the downstream appliance (where inbound QoS is enabled) dynamically communicates the bandwidth constraints to the client transmitting the traffic. The client slows down the throughput and the traffic adheres to the configured inbound QoS rule. Inbound QoS, just like outbound QoS, is not a dual-ended solution. A single appliance performing traffic shaping as needed to avoid network congestion controls inbound WAN traffic on its own.
For details about the HFSC queueing technology, see Traffic classification and the SteelHead Deployment Guide.
How an appliance identifies and shapes inbound traffic
QoS rules define the types of traffic flowing into the branch office. As with outbound QoS, the rule can match the traffic based on VLAN, IP header values, TCP/UDP ports, and AFE information. As an example, you can ensure that the voice traffic on the WAN is reserved a fixed bandwidth and this traffic has a higher priority over the recreational Internet traffic.
Inbound classes shape the inbound traffic. The class configuration resembles an outbound QoS class configuration. An outbound QoS configuration describes remote sites and applications. Inbound QoS describes the local services and applications and how to shape the inbound traffic.
The inbound traffic shaping configuration includes a default shaping class. The QoS scheduler applies the built-in inbound default class constraints and parameters on traffic not placed in any other class by the configured QoS rules. The default shaping class has a 10 percent minimum bandwidth allocation and a 100 percent maximum bandwidth allocation. You cannot delete the default class; however, you can change its bandwidth allocations.
Inbound QoS limitations
These limitations apply to inbound QoS traffic shaping.
•  When packet-mode optimization is enabled, the QoS scheduler places UDP4 traffic into the MX-TCP class. All other traffic goes into the proper class.
•  You cannot configure inbound QoS in an out-of-path deployment over a primary or auxiliary interface.
•  Inbound QoS does not throttle certain flows such as MX-TCP and UDP bulk traffic flows; however, it does provide bandwidth and latency reservation for them.
Related topics
•  Configuring port labels
•  Managing configuration files
•  Viewing inbound QoS reports