<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>My EtherealMind&#187; Blue Coat</title>
	<atom:link href="http://etherealmind.com/category/operation/blue-coat/feed/" rel="self" type="application/rss+xml" />
	<link>http://etherealmind.com</link>
	<description>Network design, architecture, thinking, working. Tech.</description>
	<lastBuildDate>Sun, 20 May 2012 09:15:21 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.2</generator>
		<item>
		<title>PacketShaper and Flow Directions</title>
		<link>http://etherealmind.com/packetshaper-inbound-outbound-outside-inside/</link>
		<comments>http://etherealmind.com/packetshaper-inbound-outbound-outside-inside/#comments</comments>
		<pubDate>Sat, 14 May 2011 23:45:16 +0000</pubDate>
		<dc:creator>Greg Ferro</dc:creator>
				<category><![CDATA[Blog]]></category>
		<category><![CDATA[Blue Coat]]></category>
		<category><![CDATA[Design]]></category>
		<category><![CDATA[Operation]]></category>
		<category><![CDATA[bluecoat]]></category>
		<category><![CDATA[packeteer]]></category>

		<guid isPermaLink="false">http://etherealmind.com/?p=5607</guid>
		<description><![CDATA[I stumbled across an old diagram I made a long time ago about the direction of flows on a BlueCoat PacketShaper. Since I've been looking for it for about three years, I've diagrammed it quickly so that it is here for future reference when I'm working PacketWise in the future. PacketShaper PacketWise is one of my very favourite tools for managing traffic flows, and much preferable to PHB QoS aka DiffServ for many types of use cases.

An TCP flow has four possible directional attribute related to the use of a inside and outside networks, and whether the flow was initiated from the client to server which sets the "direction" of the flow relative to the Packeteer. The flow is determined by who <em>initiated</em> the three way handshake. For purposes here, the <strong>Client</strong> always initiates the TCP connection, and the <strong>Server</strong> terminates the connection. 

<h2>TCP Session and Direction</h2>
Most people understand the three way handshake, but not many consider the <strong>direction</strong> of the session. 
<img style="display:block; margin-left:auto; margin-right:auto;" src="http://etherealmind.com/wp-content/uploads/2011/05/packet-shaper-flow-directions-0.jpg" alt="Packet shaper flow directions 0" border="0" width="563" height="388" />
<br />
The connection from the client to the server is outbound, but is inbound on the server. And vice versa, the server outbound session is inbound on the client.

<img style="display:block; margin-left:auto; margin-right:auto;" src="http://etherealmind.com/wp-content/uploads/2011/05/packet-shaper-flow-directions-0.1.jpg" alt="Packet shaper flow directions 0 1" border="0" width="505" height="185" />
That's not very useful for being able to define the direction of flows. 

<h2>Why is direction important ? </h2>
Direction of flows is important if you want to configure asymmetric rules. That is, not all protocols require symmetic bandwidth. For example, HTTP traffic is usually a 10:1 ratio for reply to request. That is, a request for this webpage is about 10KB, but the reply with the data, images and javascript is more than 100KB.  

<img style="display:block; margin-left:auto; margin-right:auto;" src="http://etherealmind.com/wp-content/uploads/2011/05/packet-shaper-flow-directions-0.2.jpg" alt="Packet shaper flow directions 0 2" border="0" width="494" height="259" />

For an FTP upload server, you might have the reverse condition where the inbound traffic is far more than the outbound. 

To make the most of your Internet connection for this case, you could configure the inbound bandwidth on your Internet connection to be 80% FTP, 20% HTTP and the <strong>outbound</strong> bandwidth to be 20% FTP and 80% HTTP. This gives a far better utilisation, especially in regards to better TCP Windowing and overall TCP goodput.]]></description>
		<wfw:commentRss>http://etherealmind.com/packetshaper-inbound-outbound-outside-inside/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Cisco IOS Load Balancing for Blue Coat SGOS</title>
		<link>http://etherealmind.com/cisco-load-balancing-blue-coat-sgos/</link>
		<comments>http://etherealmind.com/cisco-load-balancing-blue-coat-sgos/#comments</comments>
		<pubDate>Wed, 12 Aug 2009 22:01:04 +0000</pubDate>
		<dc:creator>Greg Ferro</dc:creator>
				<category><![CDATA[Blue Coat]]></category>
		<category><![CDATA[CCIE]]></category>
		<category><![CDATA[Cisco]]></category>
		<category><![CDATA[Design]]></category>
		<category><![CDATA[Operation]]></category>
		<category><![CDATA[ACE]]></category>
		<category><![CDATA[f5]]></category>

		<guid isPermaLink="false">http://etherealmind.com/?p=1666</guid>
		<description><![CDATA[Some time ago I used IOS SLB feature on a C6500 to load balance a pair of Blue Coat ProxySG. Here the confuguration and some notes. ]]></description>
		<wfw:commentRss>http://etherealmind.com/cisco-load-balancing-blue-coat-sgos/feed/</wfw:commentRss>
		<slash:comments>8</slash:comments>
		</item>
		<item>
		<title>Blue Coat to Acquire Packeteer-Excellent-Outcome</title>
		<link>http://etherealmind.com/blue-coat-to-acquire-packeteer/</link>
		<comments>http://etherealmind.com/blue-coat-to-acquire-packeteer/#comments</comments>
		<pubDate>Mon, 21 Apr 2008 16:39:32 +0000</pubDate>
		<dc:creator>Greg Ferro</dc:creator>
				<category><![CDATA[Blue Coat]]></category>
		<category><![CDATA[Opinion]]></category>

		<guid isPermaLink="false">http://etherealmind.com/?p=173</guid>
		<description><![CDATA[Fantastic news! As a long time user of Blue Coat and Packeteer, I am pretty excited about this. The Packeteer traffic management technologies is a long way ahead of the Cisco queueing strategy, and the Blue Coat product set has plenty of features that hold Cisco at bay in the WAN Acceleration (previously known as [...]]]></description>
		<wfw:commentRss>http://etherealmind.com/blue-coat-to-acquire-packeteer/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>Blue Coat ProxySG VIP and Cisco Switches Need Multicast Enabled</title>
		<link>http://etherealmind.com/proxysg-vip-vrrp-multicast-cisco-switch/</link>
		<comments>http://etherealmind.com/proxysg-vip-vrrp-multicast-cisco-switch/#comments</comments>
		<pubDate>Sun, 30 Mar 2008 15:28:15 +0000</pubDate>
		<dc:creator>Greg Ferro</dc:creator>
				<category><![CDATA[Blue Coat]]></category>
		<category><![CDATA[Cisco]]></category>
		<category><![CDATA[CCIE]]></category>
		<category><![CDATA[Design]]></category>
		<category><![CDATA[Operation]]></category>

		<guid isPermaLink="false">http://etherealmind.com/2008/03/30/proxysg-vip-vrrp-multicast-cisco-switch/</guid>
		<description><![CDATA[You have a pair of shiny new ProxySG boxen that you want to setup in active  / standby for high availability. You configure it up and everything seems to work, and then it doesn't, or other equipment on the same network experiences random problems. 

What you are having is a Multicast problem with your Ethernet switches, most likely your Cisco switches, that has the problem. How to understand and solve the problem after the jump. ]]></description>
		<wfw:commentRss>http://etherealmind.com/proxysg-vip-vrrp-multicast-cisco-switch/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Delete the X-Bluecoat-via Header on Your ProxySG</title>
		<link>http://etherealmind.com/delete-the-http-header-bluecoat-x-via-on-your-proxy/</link>
		<comments>http://etherealmind.com/delete-the-http-header-bluecoat-x-via-on-your-proxy/#comments</comments>
		<pubDate>Wed, 27 Feb 2008 21:56:38 +0000</pubDate>
		<dc:creator>Greg Ferro</dc:creator>
				<category><![CDATA[Blue Coat]]></category>
		<category><![CDATA[bluecoat]]></category>
		<category><![CDATA[proxy]]></category>
		<category><![CDATA[ProxySG]]></category>

		<guid isPermaLink="false">http://etherealmind.com/2008/02/27/delete-the-http-header-bluecoat-x-via-on-your-proxy/</guid>
		<description><![CDATA[If you have noticed that your Blue Coat ProxySG inserts a HTTP header in every transaction, you might want to delete this to reduce information leakage to public networks]]></description>
		<wfw:commentRss>http://etherealmind.com/delete-the-http-header-bluecoat-x-via-on-your-proxy/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Checking Connectivity on Your Blue Coat ProxySG</title>
		<link>http://etherealmind.com/checking-connectivity-bluecoat-proxysg/</link>
		<comments>http://etherealmind.com/checking-connectivity-bluecoat-proxysg/#comments</comments>
		<pubDate>Sun, 24 Feb 2008 17:52:28 +0000</pubDate>
		<dc:creator>Greg Ferro</dc:creator>
				<category><![CDATA[Blue Coat]]></category>
		<category><![CDATA[proxy]]></category>
		<category><![CDATA[ProxySG]]></category>

		<guid isPermaLink="false">http://etherealmind.com/?p=93</guid>
		<description><![CDATA[A very simple tool in your Proxy SG to check that you can access resources. It only works for HTTP but it provides a good check. I use this a lot in networks where ICMP has been disabled for security.]]></description>
		<wfw:commentRss>http://etherealmind.com/checking-connectivity-bluecoat-proxysg/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Performance of Blue Coat BCAAA Agent for Authentication</title>
		<link>http://etherealmind.com/bcaaa-bluecoat-performance-speed-capacity/</link>
		<comments>http://etherealmind.com/bcaaa-bluecoat-performance-speed-capacity/#comments</comments>
		<pubDate>Mon, 11 Feb 2008 21:21:38 +0000</pubDate>
		<dc:creator>Greg Ferro</dc:creator>
				<category><![CDATA[Blue Coat]]></category>
		<category><![CDATA[Design]]></category>
		<category><![CDATA[Operation]]></category>
		<category><![CDATA[ProxySG]]></category>

		<guid isPermaLink="false">http://etherealmind.com/?p=80</guid>
		<description><![CDATA[A common question in the Blue Coat forums is about the server specification for the BCAAA and how many users can be supported. While I am not sure sure about the performance that Blue Coat recommends I can tell you my experiences. I understand that according to Microsoft the Domain Controller should be able to [...]]]></description>
		<wfw:commentRss>http://etherealmind.com/bcaaa-bluecoat-performance-speed-capacity/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Loading Policy Configuration in the Local File</title>
		<link>http://etherealmind.com/loading-bluecoat-policy-local-file/</link>
		<comments>http://etherealmind.com/loading-bluecoat-policy-local-file/#comments</comments>
		<pubDate>Sun, 10 Feb 2008 21:23:42 +0000</pubDate>
		<dc:creator>Greg Ferro</dc:creator>
				<category><![CDATA[Blue Coat]]></category>
		<category><![CDATA[bluecoat]]></category>
		<category><![CDATA[proxy]]></category>
		<category><![CDATA[ProxySG]]></category>

		<guid isPermaLink="false">http://etherealmind.com/2008/02/10/loading-bluecoat-policy-local-file/</guid>
		<description><![CDATA[A common question in the Blue Coat forums is "how do I load this config snippet into configuration. The question most often comes from people who are new to SGOS and have been using the Virtual Policy Manager. This quick note shows you how to load a config snippet that removes the X-Bluecoat-Via header]]></description>
		<wfw:commentRss>http://etherealmind.com/loading-bluecoat-policy-local-file/feed/</wfw:commentRss>
		<slash:comments>5</slash:comments>
		</item>
		<item>
		<title>SOCKS Clients That Are Available for Your Blue Coat ProxySG &#8211; Update</title>
		<link>http://etherealmind.com/socks-client-for-proxysg/</link>
		<comments>http://etherealmind.com/socks-client-for-proxysg/#comments</comments>
		<pubDate>Wed, 06 Feb 2008 17:56:24 +0000</pubDate>
		<dc:creator>Greg Ferro</dc:creator>
				<category><![CDATA[Blue Coat]]></category>
		<category><![CDATA[ProxySG]]></category>

		<guid isPermaLink="false">http://etherealmind.com/2008/02/06/socks-client-for-proxysg/</guid>
		<description><![CDATA[A short list of SOCKS Clients that I have used or know of Note that many programs have their own SOCKS client built in, many FTP clients such as Filezilla, WS FTP, Firefox and so on have built in support. You really need a client when you have an application that must use a proxy [...]]]></description>
		<wfw:commentRss>http://etherealmind.com/socks-client-for-proxysg/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
	</channel>
</rss>

<!-- Served from: etherealmind.com @ 2012-05-21 13:35:00 by W3 Total Cache -->
