traffic shaping in high-bandwidth environments

rct786 <[email protected]> Wed, 3 Apr 2019 10:56:30 -0500
Newsgroups gmane.comp.security.firewalls.firehol.user
Message-ID <CALZHNdGcGXLUzmZX0JW==ECQgG+J2s3vuKbbU8JOABR2sdpjVw@mail.gmail.com>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