Community discussions

MUM Europe 2020
 
get2guy
newbie
Topic Author
Posts: 31
Joined: Fri Apr 09, 2010 8:50 pm

Block access to akamaitechnologies.com ?

Sat Mar 05, 2011 10:44 pm

Hi all.

I have to much trafic going to "xxxxxx.akamaitechnologies.com"

akamaitechnologies.com is a bunch of streaming servers, file servers and update servers that microsoft, apple, IBM and more are using.

I want to drop all connection from or to "xxxxx.akamaitechnologies.com" how can i do it?

Regards
Guy.
 
fewi
Forum Guru
Forum Guru
Posts: 7734
Joined: Tue Aug 11, 2009 3:19 am

Re: Block access to akamaitechnologies.com ?

Sun Mar 06, 2011 12:29 am

Why would you want people to not access Akamai? They host a LOT of content. Blocking that seems like a fundamentally very, very bad plan.
Specific answers require specific questions. When in doubt, post the output of "/ip address print detail", "/ip route print detail", "/interface print detail", "/ip firewall export", and an accurate network diagram.
 
User avatar
Belyivulk
Member Candidate
Member Candidate
Posts: 285
Joined: Mon Mar 06, 2006 10:53 pm
Location: Whangarei, New Zealand
Contact:

Re: Block access to akamaitechnologies.com ?

Sun Mar 06, 2011 2:12 am

Agreed -very bad plan! Akamai tend to host otherwise international content - locally, so cost is low and performance is high :)
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8345
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: Block access to akamaitechnologies.com ?

Fri Mar 11, 2011 3:52 pm

but when your user pays per megabyte, and suddenly his Windows downloads new service pack - how do you explain him, that those hundreds megabytes are accounted correctly, when he just opened facebook page?..
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
hedele
Member
Member
Posts: 338
Joined: Tue Feb 24, 2009 11:23 pm

Re: Block access to akamaitechnologies.com ?

Fri Mar 11, 2011 8:07 pm

I don't see how that would be your problem...
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8345
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: Block access to akamaitechnologies.com ?

Sat Mar 12, 2011 3:32 am

when customer says: "I opened one page in facebook, and you billed me $1, wtf?" - it's definitely you problem, if you don't want to loose a customer
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
hedele
Member
Member
Posts: 338
Joined: Tue Feb 24, 2009 11:23 pm

Re: Block access to akamaitechnologies.com ?

Sat Mar 12, 2011 1:09 pm

Well if that customer is not educated enough to know that his computer does stuff without him telling it to do so,
he should not be using one :) Windows DOES tell the user it has downloaded updates and would like to install them.
Also, I think he would be a lot more pissed if his computer would keep
nagging him that it's not able to download windows updates. It's a bit of a chicken/egg problem...
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8345
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: Block access to akamaitechnologies.com ?

Sat Mar 12, 2011 3:50 pm

Windows DOES tell the user it has downloaded updates and would like to install them.
exactly. at that moment it's way too late to decline downloading, isn't it? and user cannot 'upload' them back to get money back ;)
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8345
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: Block access to akamaitechnologies.com ?

Sat Mar 12, 2011 3:52 pm

nagging him that it's not able to download windows updates
you can only know that from WindowsUpdate.log ;) user cannot get to know that windows cannot download something
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
Applejack
just joined
Posts: 1
Joined: Tue Jan 21, 2014 5:12 pm

Re: Block access to akamaitechnologies.com ?

Tue Jan 21, 2014 5:32 pm

Security questions aside, there's the problem of bandwidth consumption by the growing number of applications that frequently check-in to services outside of the corporate network and download content. As the network administrator I want to decide when or if these applications are communicating to the Internet and what is being transmitted. One of the challenges I face comes from common applications downloading updates individually when I would rather download the update once and deploy to all inside the LAN. An application installed on 100 computers, Adobe or Java for example, may get downloaded 100 times if left up to the application. My preference would be to have that file be downloaded exactly one time and be deployed internally, at LAN speed, on the schedule of my choosing (so as not to disrupt the end user). Unfortunately, there is a growing list of applications that are pre-configured to "phone home" and download updates at "their" whim.
Microsoft's WSUS affords us the opportunity to download updates just once across the Internet link and deploy internally on the LAN.
Our Antivirus solution is configurable to download just once to a server and deploy out to distribution points across our enterprise.
Unfortunately, not all vendors supply an update solution for their applications and 3rd party tools must be utilized or, if you have the personnel, the sneaker net option. This is unfortunate since it means that the updates are being downloaded far more often than necessary which affects the available bandwidth of the Internet and ultimately costs all of us more money.
However you look at it, the person behind the original post has valid concerns. I recommend that you do your best to block as much unknown, unsuspected, unwanted traffic traversing your Internet connection and seek out internal software update tools to better control the environment for the betterment of your end user's experience with accessing work-related content on the Internet and your company's network security.
 
User avatar
shavvox
just joined
Posts: 11
Joined: Mon Apr 02, 2007 6:34 pm
Location: Missouri

Re: Block access to akamaitechnologies.com ?

Mon Aug 21, 2017 4:01 am

Years later we can see a concern especially with Windows 10.

Is there a way in Mikrotik to block akamai content?

I have a new motel client in a small rural area that only has 8Mbps download. They have 48 rooms and when akamai speaks no one else can use the network.

Can anyone help with this?
 
R1CH
Forum Veteran
Forum Veteran
Posts: 919
Joined: Sun Oct 01, 2006 11:44 pm

Re: Block access to akamaitechnologies.com ?

Mon Aug 21, 2017 4:03 am

Better to use QoS so those downloads are lower priority than normal traffic. Should be easy enough to classify.
 
User avatar
shavvox
just joined
Posts: 11
Joined: Mon Apr 02, 2007 6:34 pm
Location: Missouri

Re: Block access to akamaitechnologies.com ?

Mon Aug 21, 2017 5:30 am

Ok.

So how do I identify the traffic? I am guessing once I figure that out I can do what ever I want with it. Right?

I would rather them just do their updating somewhere else, such as when they get home or at their office or whatever.

Who is online

Users browsing this forum: CZFan, InoX, McSee, MSN [Bot], SiB, vortex, Zamtron and 127 guests