Some people in the local area network use P2P download tools such as BT, Thunder, Electric Donkey and Electric Mule to download, which causes other users in the local area network to feel that the Internet speed is slow and the network speed is stuck.
Cause of failure
When the hosts in the local area network use P2P to download, P2P software will occupy a lot of bandwidth from the local area network to the Internet, which will lead to slow network speed and card problems for other users.
Principle analysis
The working principle of BT
P2P software provides uploading for other users while downloading, so the download speed will not decrease with the increase of users. To put it simply: the more people download, the faster it will be.
The specific working principle of BT is as follows: BT first divides a file into Z parts at the uploader. A downloads the N part randomly on the server side, and B downloads the M part randomly on the server side, so that BT of A will get the M part downloaded by B on the computer according to the situation, and BT of B will get the N part downloaded by A on the computer according to the situation, which will reduce the load of the server and speed up the download speed of users (A and B). For example, if C wants to connect to the server to download, it may be only a few K, but it will be much faster if it goes to A and B's computers. So the more people use it, the more people download it, and the faster everyone will be. Besides, while you are downloading, you are also uploading (someone else took part of that file from your computer).
Other P2P software works in a similar way.
Test results:
Thunder and BT grab the most bandwidth, and the speed of electric donkey may not be very high due to seeds and other reasons. BT and other software provide download services for others while downloading. Because the maximum uplink bandwidth of ADSL is only 5 12K, it is more likely to cause congestion of the uplink bandwidth at the LAN exit after using P2P software. However, any online operation requires traffic in both uplink and downlink directions. If the uplink bandwidth is full, it will affect the use of all users.
See Annex 2 for the test report.
solve problems
1. Block the ports used by P2P software for restriction. See appendix 1 for commonly used P2P software ports.
2. Block the IP address of P2P software seed.
3. Use the speed limit function of the intranet host to limit the upload/download rate of the host, allow P2P software to download, but limit its speed to a tolerable range, and limit the upload bandwidth not to exceed the download bandwidth.
4. While using CBQ to limit the download speed (the total bandwidth is less than 7Mbps), you can also use the speed limit function of the intranet host to limit the upload/download speed, so as to achieve better results.
5. Strengthen intranet management, intervene by administrative means, and stop illegal downloading in time.
HiPER users quickly found P2P software downloads.
Take BT as an example: the common ports for downloading BT are 688 1-6889 and 6969. When you select "All Records" in the HiPER router to query, you can see the access records of BT ports. When searching for records, you can focus on port numbers and records with a large number of uploaded/downloaded packages, as shown below:
Because most BT software now has the function of manually specifying ports, it is difficult for network administrators to query. At this point, they can start by looking for records with a large number of uploaded/downloaded packets. As shown in the above figure, the data flow of record 3 is obviously large. At this time, we can first doubt whether there is illegal use of this host.
Other P2P software discovery methods are similar to the above methods. See appendix 1 for common P2P software ports.
HiPER user solution
1, blocking P2P common ports.
This method can only limit the download of P2P software to a certain range, because all the above P2P software has the function of manually specifying ports. For example, any of the above software can arbitrarily specify a port for data transmission, which increases the difficulty of searching and downloading.
Example: Blocking the common ports of P2P software such as BT.
Use the following settings to add a new policy in Advanced Configuration-Business Management.
Policy name: bt 1
Group selection: 192. 168.0.222.
Protocol: 6(tcp)
Destination start port: 688 1 destination end port: 6889.
Destination start address: keep the default destination end address: keep the default.
Source start port: 1 source end port: 65535
Insert Location: Leave the default value.
Action: Prohibit
Time period: Leave the default value.
2. Seal the IP address of the server where the seed is located.
Regarding the IP address of the sealed seed, the network administrator needs to do a lot of preliminary search and daily accumulation. Such as /kt_article_show.php? item _ id = 22 16 & amp； categ _ code = 1003 1002
With the development of the Internet and the appearance of various application software, we can chat with distant relatives by telephone and play interactive games with friends through the Internet. People pay more and more attention to the corresponding network bandwidth. Renting more bandwidth can certainly improve the network speed, but with the development of P2P tools such as BT software and electric donkey, no matter how much bandwidth you have, it will occupy 100%. How to shield P2P software has gradually become a headache for network administrators. In fact, no matter how to control it, there are policies on the top and countermeasures on the bottom. We can't completely ban the running and downloading of P2P software. In practical work, the author turns this work into bandwidth limitation, and the effect is still remarkable. The bandwidth controller effectively limits the bandwidth of the network, thus realizing the control of P2P software.
First, limit your thoughts:
After running BT software, computers in a certain department of the company will send countless connections, occupying all the network bandwidth. No matter how network administrators block BT seed websites or restrict port traffic, P2P software cannot be completely killed. In this case, we can only start with the bandwidth, and limit the speed of the network segment where BT software may run in combination with the proxy server, so as to control its maximum bandwidth at a certain speed. For example, if the company's total export is 10M optical fiber, then the speed of departments that may use BT software can be limited to 1MB-2MB by speed limiting, so even if this 2MB resource is occupied by BT, it will not affect the 8MB bandwidth of other departments.
The author found a good gadget to limit and adjust bandwidth in practical work. Through him, we can control the transmission speed of the network card at any time, fast if we want, slow if we want, and it is very simple and flexible to set up. But it runs on a computer, not a router or switch. This operation mode determines that he can only limit the flow and speed of the network card on one computer. But the author found that if we use a proxy server, that is to say, we connect the upstream interface of the company's network using BT or P2P software computers to this proxy server, and configure remote and routed access on this proxy server. Next, the configuration bandwidth controller is installed on the external network interface of the proxy server, which can limit and adjust the speed of the whole network.
Second, the implementation steps:
After you have the implementation idea, you can follow this idea to implement the detailed steps.
Bandwidth controller small file:
Software version: V 1.07
Software size: 1432 KB
Software language: English version
Software category: * * Enjoy software
Application platform: Win9x/NT/2000/XP
Download address: FTP://ftp3.chinaitlab.com/channel/Cisco/Cisco Soft /35962 Bandwidth Controller StandardSetup.exe.
(1) Install the bandwidth controller software:
Step 1: Double-click the downloaded bandwidth controller main program to install it. (as shown in figure 1)
Figure 1
Step 2: The next step is to agree to install the protocol interface. We choose "Next" after "Agree". (as shown in figure 2)
Figure 2
Step 3: We have two installation modes. Generally, we choose the quick installation mode, which is the top option. For readers who are not familiar with the software, there is no need to choose the second custom installation mode. (as shown in figure 3)
Figure 3
Step 4: In the process of installing the software, all network connections will be reset, so the software will remind users to close all current networks and terminate the programs being downloaded. Click Continue Installation to do the following. (as shown in figure 4)
Figure 4
Step 5: Because the bandwidth controller has many digital signatures that have not been confirmed by Microsoft, there will be many prompts during the installation process. Of course, we don't need to worry, just install it all. (as shown in figure 5)
Figure 5
Step 6: After installing the software, the completion interface appears. We can run the program directly or view the log file information. (as shown in figure 6)
Figure 6
At this point, we have completed the installation of the bandwidth controller software, but if we want to control the network bandwidth and speed, we still need to configure it.
(2) Configure the bandwidth controller:
After installing the software for the first time, the bandwidth controller Ethernet adapter configuration wizard will start automatically. Through this wizard, we can configure which interface uses the bandwidth controller and limit the speed.
Step 1: Start the bandwidth controller Ethernet adapter configuration wizard. (as shown in fig. 7)
Figure 7
Step 2: Configure the upload and download speed of the network, so as to limit the speed here. The first behavior is download speed, and the second behavior is upload speed. The unit here is kilobytes, not kilobytes. For attention, the actual conversion is 1KB=8Kb. The maximum speed here can be set to 100MB, which is the maximum speed of our 10M/ 100M adaptive network card. (as shown in fig. 8)
Figure 8
Step 3: Select which network card the speed limit just set applies to. Because there are two network cards on the proxy server, local connection 1 and local connection 2 will appear. The network card corresponding to the local connection 1 is connected to the upstream port of the switch, and then connected to the network where we need to limit the speed. The network card corresponding to local connection 2 is connected to the external network, and the external network is all network cards exported from the external network. So we choose "local connection 1" and then set the adapter to connect to the private network/intranet, and select the adapter corresponding to "local connection 2" to connect to the public network/extranet. (as shown in fig. 9)
Figure 9
Step 4: Complete the setting of the network card and display the information just set. (as shown in figure 10)
Figure 10
At this point, we have completed the installation and configuration work. Next, let's take a look at the remarkable effect that the bandwidth controller has achieved for us to easily control the network bandwidth speed.
(3) The bandwidth is adjusted by the actual bandwidth controller:
Let's take a look at the actual effect of installing bandwidth controller and setting speed limit on proxy server. We have carried out the download speed experiment on the computer of the speed-limited network.
Step 1: Start the bandwidth controller on the proxy server, which will be minimized to the taskbar. (as shown in figure 1 1)
Figure 1 1
Step 2: Just set the bandwidth limit speed to 56Kb, and the software download speed of the client will immediately drop to 2.4 KB/s ... (as shown in figure 12).
Figure 12
Step 3: Go to the computer with proxy server again and select View->; Options. (as shown in figure 13)
Figure 13
Step 4: Click the "Network Adapter Wizard" button in the bandwidth controller options on the network to enable the network adapter configuration wizard again. (as shown in figure 14)
Figure 14
Step 5: Reconfigure the bandwidth limiting speed as described above. For example, we set the upload and download to 100Mb/s/s ... (as shown in figure 15).
Figure 15
Step 6: The download speed of the client software is restored to the original speed, reaching a high speed of 203 KB/s. By comparing the two download speeds, it can be seen that the application effect of the bandwidth controller is still very obvious. (as shown in figure 16)
Figure 16
Third, summary:
Bandwidth controller is suitable for companies to restrict a certain network, which needs to be connected to a special proxy server. If the company is not going to use a proxy server, then the bandwidth controller can only limit the internet access speed of a single computer, and cannot limit the bandwidth of multiple computers or even the whole network.
References:
/00/09/ 19/74/? 183,0
In addition, you should make some settings on your computer:
Windows XP reserves 20% bandwidth by default, but it has no effect on our individual users. It is better to use it than to leave it idle. Delete "Limit Remaining Bandwidth" to increase broadband speed by:
(1) Click Start \ Run, enter gpedit.msc and press Enter to open the Group Policy Editor.
(2) Expand Computer Configuration \ Management Template \ Network QoS Packet Scheduler in the left window, and then click and select "Limit reserved bandwidth" in the right window.
(3) Right-click this item and select the "Properties" command in the menu that appears to open the "Restrict reserved bandwidth properties" dialog box.
(4) Select "Disabled" (or select "Enabled" and then enter "0" in the bandwidth limit, which has the same effect).
This releases the original reserved bandwidth by default, which is very useful for friends who surf the Internet.