11-08-2013 10:29 AM
Yeah as mentioned before (e.g., here) the "ipp2p" module used for P2P matching is quite old and it may be more effective if combined with connmark/mark (i.e., so that when one packet is matched then the whole flow is matched etc.). We are also looking into more effective DPI solutions as discussed before.
An alternative is to set up QoS like you said. If it is feasible to match traffic that is "important" (e.g., not P2P), you could set up QoS so that the important traffic gets more bandwidth etc.