Traffic policing controls the rate of traffic entering a network within a specified range by metering traffic and taking punitive actions on excess traffic, conserving network resources.
As shown in Figure 1, traffic policing involves the following components:
Meter: uses the token bucket mechanism to measure network traffic and sends the result to the marker.
Marker: colors packets green, yellow, or red based on the metering result received from the meter.
Action: performs actions based on packet colors. The following actions are defined:
Pass: forwards the packets that conform to the limit.
Re-mark + pass: changes the local priorities of packets that exceed the limit and forwards the packets.
Discard: drops the packets that exceed the limit.
If the rate of a packet stream exceeds the limit, the system lowers the priority of the excessive packets in the stream before forwarding them or discards the packets. By default, the system forwards green and yellow packets, and discards red packets.