What Is Bandwidth and How to Choose the Right One?
The bandwidth of CFW is independent of the bandwidth of other network products. Therefore, the bandwidth of CFW must be purchased separately.
NAT and CFW are independent of each other and are connected in series. Therefore, you must select CFW bandwidth with the same or higher capacity to ensure that the bandwidth of the boundary firewall and the NAT boundary throughput meet user requirements.
What Is Peak Bandwidth, and Is It Upstream or Downstream?
Peak bandwidth refers to the maximum value of the bandwidth for both upstream and downstream traffic. For example, if you purchase 100 Mbps bandwidth, CFW can simultaneously handle 100 Mbps upstream and 100 Mbps downstream traffic.
Will My Business Be Affected If the Service Bandwidth Exceeds the Internet Firewall Bandwidth Limit?
Bandwidth overload on the Internet Firewall does not cause packet loss or affect the traffic rate of customer services. However, the firewall will be unable to provide its protection feature.
Starting from September 25, 2024, when service bandwidth exceeds 100% of the Internet Firewall bandwidth, the following measures will be taken:
Disable some Internet Firewall Toggles to Bypass and forward a portion of the traffic, protecting only the traffic within the bandwidth specification.
The system supports configuring weights for Firewall Toggles and setting the priority for automatically disabling Firewall Toggles.
Attention:
After a Firewall Toggle is automatically disabled, you can manually enable the Internet Firewall Toggle. If service traffic exceeds the Internet Firewall bandwidth after the toggle is enabled, continue to take the measures described above.
For example:
The Internet Firewall bandwidth is 400 Mbps, with 200 Mbps allocated to the Guangzhou region. Four Internet Firewall Toggles are enabled in the Guangzhou region. When the service bandwidth in the Guangzhou region reaches 310 Mbps, two Internet Firewall Toggles are disabled. Under the protection of CFW, the service bandwidth for the Guangzhou region is maintained at 200 Mbps.
After the cooldown period, if the service bandwidth is lower than the Internet Firewall bandwidth, the Firewall Toggle is automatically re-enabled:
|
3 times or less | 2 hours |
4 to 7 times | 1 day |
8 times or more | 3 days. |
For example:
The Internet Firewall bandwidth is 600 Mbps, and five Internet Firewall Toggles are enabled. When the service bandwidth reaches 610 Mbps, one Internet Firewall Toggle is disabled, leaving only four Internet Firewall Toggles enabled. Under the protection of CFW, the service bandwidth is maintained at 600 Mbps. If the bandwidth exceeds the limit ten times within the last month, after three days, the Internet Firewall Toggle is restored, and five Internet Firewall Toggles are enabled.
Continuously monitor CFW bandwidth alarms. When bandwidth is high, disable some Firewall Toggles or expand the bandwidth to ensure all traffic is protected, thereby securing your services.
Will My Business Be Affected If the Service Bandwidth Exceeds the Peak Bandwidth Limit?
The Internet Firewall is deployed in bypass mode. Exceeding the protection bandwidth does not cause packet loss for customer service traffic or affect customer traffic rates. The NAT Firewall is deployed in series, and exceeding its protection bandwidth causes packet loss for customer service traffic. If public network traffic exceeds the purchased CFW boundary bandwidth, CFW does not guarantee protection for the traffic that exceeds the bandwidth. For the portion of traffic that exceeds the bandwidth, we will allow it to pass.
Continuously monitor CFW bandwidth alarms. When bandwidth is high, disable some Firewall Toggles or expand the bandwidth to ensure monitoring functions operate normally, thereby securing your services.
Does the CFW Internet Boundary Bandwidth Limit Traffic?
CFW does not limit traffic.
Is Inbound and Outbound Bandwidth Calculated Separately? Will Outbound Bandwidth Exceeding the Purchased Specification Affect Inbound Traffic Rule Matching?
Yes, inbound and outbound bandwidth are calculated separately.
CFW does not guarantee protection for traffic that exceeds the purchased bandwidth. If only outbound traffic exceeds the purchased bandwidth and fails to match rules, this does not affect rule matching for inbound traffic.
Is the Bandwidth of the Internet Firewall and the NAT Firewall Calculated Separately?
Yes, the bandwidth for the Internet Firewall and the NAT Firewall is calculated separately.
Note:
The bandwidth of the NAT Firewall is consistent with that of the Internet Firewall. By expanding the Internet Firewall bandwidth, you can expand the NAT Firewall bandwidth.
Does CFW Bandwidth Support Arbitrary Scaling Up and Down?
Bandwidth can only be scaled out and does not support downgrading.
Does the CFW Bandwidth Limit Depend on the Bandwidth of the Connected CVM?
No. The CFW bandwidth specification sets quotas based on the bandwidth actually used by users. This ensures that the traffic bandwidth consumed at any given time does not exceed the CFW bandwidth parameter.