QoS profile management

QoS profiles allow you to shape the traffic managed by a workload VPN intent.

A QoS profile is global and can be re-used across workload intents. After you create QoS profiles, you then assign them to sub-interfaces of a workload VPN intent. The Profile Manager handles the deployment of QoS profiles. Before you deploy a workload intent, you must first deploy the Profile Manager.

If two workload intents reference the same QoS profile on the same node, only a single resulting QoS policy is created. The list of nodes on which an QoS policy is required is dynamically created based on the attachments of sub-interfaces to subnets where the QoS profile is referenced.

The configuration of a QoS policy is dynamically added to the devices when sub-interfaces that have QoS profiles referenced are added to subnets. The node list for a QoS profile is dynamically updated and the configuration is automatically deployed on the nodes as soon as the node is added to the list for a specified QoS profile.

You can generate the configuration of a QoS profile even if there are no nodes that require the configuration, which means that you can view the resulting QoS policies before they are associated with subnets or sub-interfaces in the QoS profile.

When you remove a QoS profile from a sub-interface of a node, the QoS policy configuration is automatically removed when the workload intent is deployed.

Creating a QoS profile

You can create either a QoS classifier profile or a QoS rewrite rule profile.
  1. Click to open the main menu and select Profiles.
  2. Use the Region Selector at the top of the page to select the region in which to create the QoS profile.
  3. From the Profiles drop-down list, select QoS.
  4. If the Profile Manager is in the deployed state, create a candidate version.
    On the upper right of the QoS view, click and select Create Candidate Version.
    The Detailed Status field shows Created.
  5. Click +ADD QOS PROFILE, then specify the type of profile you are creating.
    • To create a QoS classifier profile, click CREATE QOS CLASSIFER, then go to Step 6.
    • To create a QoS profile for rewrite rules, click CREATE QOS REWRITE RULE, then go to Step 7.
  6. Configure settings for a QoS classifier profile.
    1. In the General pane, provide a name for the QoS profile and an optional description.
    2. In the Classifiers pane, click + DSCP POLICY.
    3. In the Add DSCP Policy form, set the following parameters for the policy.
      • Value
      • Forwarding Class
    4. Click ADD.
      Continue adding DSCP policies as needed.
    5. Go to 8.
  7. Configure settings for the QoS rewrite rules profile.
    1. In the General pane, provide a name for the QoS profile and an optional description.
    2. In the Rewrite Rules panel, click + QOS MAPPING.
    3. In the Add QoS Mapping form, set the following parameters for the mapping entry:
      • Forwarding Class
      • DSCP
    4. Click ADD.
    5. Repeat steps 7.c and 7.d until the DSCP policy list is complete.
      Note: To delete a DSCP policy from the list while you are executing this procedure, click at the end of the policy's row and select Delete.
      The Workload Reference List field is empty. This field shows all of the workload VPN intents that are currently using this global QoS profile, but because this profile is new, no workload VPN intents are using it.
  8. At the lower right of the QoS overlay, click CREATE.
    The QoS profile is added to the QoS view.

Editing and deploying a QoS profile

If the Profile Manager is already deployed, to edit a QoS profile, first, create a candidate version of the Profile Manager. Then, edit the QoS profile. To push the changes to the nodes, add the Profile Manager to the deployment pipeline and then deploy it.
  1. Click the main menu and select Profiles.
  2. Use the Region Selector at the top of the page to select the region containing the QoS profile.
  3. If the Profile Manager is in the deployed state (that is, the Detailed Status field shows Deployed), create a candidate version first.
    On the upper right of the Profile Manager view, click and select Create Candidate Version.
    The Detailed Status field shows Created.
  4. From the Profiles drop-down list, select QoS.
  5. Update the QoS profile.
    1. Double-click the profile that you want to edit.
    2. Update parameters as needed.
    3. On the lower right of the QoS overlay, click SAVE.
  6. From the Profile Manager view, click GENERATE PROFILE MANAGER.
  7. Click to add the Profile Manager to the deployment pipeline.
  8. Deploy the Profile Manager manually.
    See Step 2 in Deploying the Profile Manager.

Deleting a QoS profile

You can delete a QoS profile provided it has not been used in a workload VPN intent. If you try to delete a QoS profile that is in use, the system prevents the action and displays a message indicating why the profile cannot be deleted.
  1. Click to open the main menu, then select Profiles.
  2. Use the Region Selector at the top of the page to select the region containing the QoS profile.
  3. If the Profile Manager is in the deployed state (that is, the Detailed Status field shows Deployed), create a candidate version first.
    On the upper right of the Profile Manager view, click and select Create Candidate Version.
    The Detailed Status field shows Created.
  4. From the Profiles drop-down list, select QoS.
  5. Find the profile from the list and click at the end of its row.
  6. Select Delete from the drop-down list, then click OK.
  7. Deploy the Profile Manager manually.
    See Step 2 in Deploying the Profile Manager.
The system deletes the selected profile and closes the confirmation form, returning you to the Profiles page with the QoS view selected. The profile you just deleted no longer appears in the list.