{{indexmenu_n>18}}
======Rating group, Tethering, Volume Quotas======

===== SSG configuration =====
  * The service **requires additional RAM** compared to the standard requirements, which is reserved by the following setting in ''/etc/dpi/fastdpi.conf'': <code bash>support_service_18=1 </code>
  * ''max_profiles_serv18'' — configures the maximum number of Service 18 profiles.\\ Default value: ''16''
  * Specify the number of rating groups (rg): <code bash>rating_group_count=0</code> ''0'' (default) — RGs are disabled
  * ''max_profiles_serv20'' — configures the maximum number of profiles.\\ Default value: ''32''

<note important>
To apply the configuration, restart the service:
<code bash>service fastdpi restart</code>
</note>

Protocol grouping principle: DPI marks each new flow with a protocol from the [[en:dpi:dpi_options:protocols|list]]. The protocols are grouped into [[en:dpi:dpi_options:opt_bandwidth_mgmt|traffic classes]] for applying

Protocols are also grouped into Rating Groups with tethering taken into account. Tethering is determined based on the TTL value in outgoing traffic. The ''tethering_ttl_allowed = 128:64'' parameter specifies the list of allowed TTL values for subscriber traffic that are not considered tethering. Values are separated by ':'. Up to 256 values (0-255) can be specified. This parameter is configured globally on the DPI. Per-subscriber profiling is planned in the roadmap. Rating Groups are used for volume quotas, policing by Rating Group, and performing the ''block'' and ''report'' actions.

Service 18 defines protocol grouping by traffic classes (cs) and Rating Groups (rg).

Service 20 defines policing, volume quotas, and actions for Rating Groups (rg).

===== Example of configuring traffic classes and Rating Groups using Service 18 =====

<note>[[en:dpi:dpi_options:opt_shaping:shaping_session|Detailed description of Service 18]]</note>

  - Prepare the ''example.txt'' text file: <code>    http cs0  teth1 rg1
    https cs0  teth1 rg1
    http cs0  teth2 rg2
    https cs0  teth2 rg2

    dns  cs1  teth1 rg1
    dns  cs1  teth2 rg2

    default cs7 teth0 rg3</code> Parameter description:
    * teth0 — no tethering control (default)
    * teth1 — tethering control enabled: tethering detected
    * teth2 — tethering control enabled: no tethering detected\\ \\ rgN specifies the Rating Group number:
    * rg0 default (rg is not set)
    * rg1 sets rg=1\\ ..
    * rg65535, maximum number of Rating Groups\\ \\ :!: **In this example, tethering is monitored for the HTTP and HTTPS protocols, and the corresponding rg is assigned depending on the result. Note that the policing class (cs) is the same, but the rg differs depending on the TTL. The same applies to the DNS protocol. For ALL other protocols (default), tethering is not checked and a separate rg is assigned.**
  - Convert the file to the internal format: <code bash>cat example.txt|lst2dscp /tmp/example.bin</code> Reverse conversion for verification: <code bash>dscp2lst /tmp/example.bin</code>
  - Create a Service 18 profile and assign it to the subscriber: <code bash>fdpi_ctrl load profile --service 18  --profile.name test_dscp --profile.json '{ "dscp" : "/tmp/example.bin" }'
fdpi_ctrl load --service 18  --profile.name test_dscp --login test_subs</code>
  - Verify the service assignment: <code bash>fdpi_ctrl list --service 18 --login test_subs</code>

The ''trace_ip'' trace now includes the ''rg=N'' field to determine the DPI behavior for a specific flow.

===== Example of configuring policing, volume quotas, and actions for Rating Groups (rg) using Service 20 =====

  - Prepare a text file in which TBF policing, a quota, and an action upon reaching the quota are specified for each Rating Group: <code bash>rg1 tbf rate 1Mbit burst 1Mbit inbound.rate 8Mbit inbound.burst 1Mbit quota 100MB report
rg2 tbf rate 8Mbit burst 1Mbit inbound.rate 8Mbit inbound.burst 1Mbit quota 1GB block</code> :!: **This example defines two Rating Groups. rg1 has an upload rate of 1 Mbps, a download rate of 8 Mbps, and a 100 MB quota with the ''report'' action when the quota is reached. rg2 has an upload rate of 1 Mbps, a download rate of 8 Mbps, and a 1 GB quota with the ''block'' action when the quota is reached.**\\ \\ ''report'' and ''block'' are the available actions when the quota is reached:
    * ''report'' — report that the quota has been reached, but continue forwarding traffic;
    * ''block'' — report that the quota has been reached and block traffic for the corresponding Rating Group
  - Convert the text file to binary format: <code bash>cat rg.txt | lst2rg /var/lib/dpi/rg.bin</code> Reverse conversion for verification: <code bash>rg2lst rg.bin > rg.txt</code>
  - Create a Service 20 profile and assign it to the subscriber: <code bash>fdpi_ctrl load profile --service 20 --profile.name rg1 --profile.json '{ "rg_list" : "/var/lib/dpi/rg.bin" }'
fdpi_ctrl load --service 20  --profile.name rg1 --login test_subs</code>