Hi Xan thanks so much for your interest and advice. Just for the sake of the thread I'll restate the primary concern and that is "can one configure the Smart Queue to recognize and throttle the win10 updates download stream?" The question you pose "Is there anything UNIQUE about the data?" is to the same point. Why does this traffic go untouched in an otherwise normally functioning smart queue? UBNT... IS THERE A BUG HERE. PLEASE HELP. DPI classifies the stream as Web Other.
Again, I believe there are other folks who have seen this behavior, indeed there are other threads posing the same question but they largely go unanswered. What has anyone else done to control this malicious behavior from ms?
I also don't have a win10 machine I can test with currently. All of our managed clients remain on win7pro domain environments. The exception is this potential church customer who has allowed unmanaged win10 updates into their environment and we observed this full d/l saturation when we did our survey visit with them, causing their network to be unusable as well. They have 2 bonded T1's 3mb up/down.
We focused on the Edgerouter line for small VOIP implementations (up to 25-30 phones) ) on local cable and dsl providers due to it being one of few products to market with fq_codel. We have been very happy with the Edgerouter X and Lite to date and believe it to be an appropriate and cost effective solution for this use.
I fully appreciate the pfsense suggestion, and we have used other firewall distros in the past (smoothwall for one) and also ipfire which is to my knowledge the only distro out there with an fq_codel mechanism exposed in the gui.
Replies are appreciated! Thanks. - mike
