All Products
Search
Document Center

Smart Access Gateway:Create and manage QoS policy instances

Last Updated:Jul 17, 2026

You can create a QoS policy instance to classify traffic and guarantee bandwidth for high-priority traffic, or delete a QoS policy instance that is no longer needed.

Create a QoS policy instance

Before you can use a QoS policy, you must create one. A QoS policy contains traffic throttling rules and traffic classification rules that classify your traffic and guarantee bandwidth for high-priority traffic.

  1. Log in to the SAG console.

  2. In the top navigation bar, select the target region.

  3. In the left-side navigation pane, click QoS Policy.

  4. On the QoS Policy page, click Create QoS Policy.

  5. On the Create QoS Policy page, set the following parameters and click Create.

    Configuration area

    Parameter

    Description

    Basic Information

    Resource Group

    Select the resource group for the QoS policy.

    QoS Policy Name

    Enter a name for the QoS policy.

    QoS Policy Description

    Enter a description for the QoS policy.

    Rule

    Rule Priority

    The priority of the traffic throttling rule. When bandwidth is insufficient, the system prioritizes traffic that matches higher-priority rules.

    Valid values: 1 to 3. A smaller value indicates a higher priority.

    Throttling Policy

    The following throttling modes are available:

    • By Percentage: Ensures that the target traffic receives a specified percentage of the total bandwidth.

      If you select By Percentage, you must also select a bandwidth type and specify the minimum and maximum bandwidth percentages. The following bandwidth types are supported:

      • CCN Bandwidth: The bandwidth for traffic from your on-premises network to Alibaba Cloud.

      • Total Internet Bandwidth: The bandwidth for traffic from your on-premises network to the Internet.

      For example, if your total Internet bandwidth is 20 Mbps and you want to guarantee voice traffic a minimum of 10 Mbps and a maximum of 15 Mbps, select Total Internet Bandwidth, identify the voice traffic with a 5-tuple, and set the maximum and minimum bandwidth percentages to 75% and 50%, respectively.

    • By Bandwidth Value: Guarantees a specific minimum and maximum bandwidth for target traffic.

    Traffic Classification Rule

    5-Tuple Name

    Enter a name for the 5-tuple.

    5-Tuple Description

    Enter a description for the 5-tuple.

    Protocol Type

    The protocol of the data packets.

    For supported protocols, see the information in the console.

    Validity Period

    The effective date range for the 5-tuple.

    Source CIDR Block

    The source CIDR block for the data packets.

    Source Port Range

    The source port range for the data packets.

    Valid values: -1 and 1 to 65535.

    Examples: 1/200 and 80/80. A value of -1/-1 means the port is not restricted.

    Destination CIDR Block

    The destination CIDR block for the data packets.

    Destination Port Range

    The destination port range for the data packets.

    Valid values: -1 and 1 to 65535.

    Examples: 1/200 and 80/80. A value of -1/-1 means the port is not restricted.

    Application Group

    Select an application group. An application group contains multiple applications. When you select a group, the system identifies all applications in it.

    For supported application groups, see the information in the console.

    Application

    Select a specific application from the selected group.

    For supported applications, see the information in the console.

    Note
    • Configuring an Application Group or an Application creates an application-aware QoS policy. You can associate application-aware QoS policies only with SAG instances that have the DPI feature enabled. To enable the DPI feature for an SAG instance, see Manage the DPI feature.

    • If you configure both an Application Group and an Application, the system recognizes all applications in the group and the individually selected applications.

Delete a QoS policy instance

  1. Log in to the SAG console.

  2. In the top navigation bar, select the target region.

  3. In the left-side navigation pane, click QoS Policy.

  4. On the QoS Policy page, find the QoS policy to delete and click Delete in the Operation column.

  5. In the Delete QoS Policy dialog box, confirm the deletion and click OK.

Related documentation