Windows Update bandwidth control

Windows 11 defaults Delivery Optimization to “PCs on my local network and PCs on the internet.” Your machine can upload cumulative update files to strangers to help Microsoft’s CDN, and no user-facing toast tells you it is happening. On a metered plan or a slow rural line, the same setting is the reason downloads for other apps grind to a stop right after Patch Tuesday.

The seven best apps for controlling Windows Update bandwidth below either cap the upload side of Delivery Optimization, throttle Windows Update as a whole, or block it selectively when you need the network for something else. All work on Windows 10 and Windows 11.

What to look for in a Windows Update bandwidth tool

Quick comparison table

App Best for Platforms Free plan Starting price/mo Rating
GlassWire Firewall plus per-app traffic view Windows Free (limited) $2.99 Well reviewed
NetLimiter Per-process bandwidth caps Windows 30-day trial $19.95 one-time Highly rated
TripMode Metered-connection auto-block Windows, macOS 7-day trial $2.50 Loved on tethered plans
Wumgr Full Windows Update disable/enable Windows Free (OSS) Free Niche but effective
Windows Update Blocker One-click WU service block Windows Free Free Widely used
NetBalancer Per-process priority queues Windows Free (5 processes) $49.95 one-time Power-user pick
TrafficMonitor Live traffic and system-tray meter Windows Free (OSS) Free Popular in enthusiast forums

The apps

1. GlassWire – best for firewall plus per-app traffic view

GlassWire shows every process using the network in real time, with a graph you can scrub back through to see when Windows Update fired. The included firewall lets you block outbound traffic per app with one click, and a “Things” tab warns when a new host or DNS lookup shows up.

Where it falls short: The free tier caps history to a few days and limits some alerts. Bandwidth throttling is coarse — block or allow, not “cap at 500 KB/s.”

Pricing:

Platforms: Windows.

Download: GlassWire.com

Bottom line: GlassWire is the fastest way to see what caused the last bandwidth spike, then block it.

2. NetLimiter – best for per-process bandwidth caps

NetLimiter is the tool most system integrators reach for when a Windows box needs a hard bandwidth cap on svchost or Steam. Rules apply per process, per user, and per connection, and you can chain a scheduler so caps are 100 KB/s during work hours and unlimited at night.

Where it falls short: UI is dense and takes an afternoon to learn. Licensing is per machine, so a household of PCs adds up.

Pricing:

Platforms: Windows.

Download: NetLimiter.com

Bottom line: Pick NetLimiter when you need a hard cap on Windows Update rather than a full block.

3. TripMode – best for tethered and metered lines

TripMode blocks background traffic the moment you tether to a phone or connect to a hotspot SSID it recognises. Windows Update, Delivery Optimization, and OneDrive all go silent until you tap Allow on the tray icon.

Where it falls short: SSID-based triggers work best if your phone hotspot uses a stable name. Not aimed at users who want per-KB caps on a fixed line.

Pricing:

Platforms: Windows, macOS.

Download: TripMode.ch

Bottom line: TripMode is the “airplane mode for Windows Update” for anyone who works from a hotspot.

4. Wumgr – best for a full Windows Update kill switch

Wumgr (Windows Update Manager) exposes the underlying Windows Update APIs directly. You can pause updates for weeks at a time, choose which updates to install, block specific KB numbers, and stop the update service entirely.

Where it falls short: Open-source, community-maintained. No commercial support, and each Windows feature update needs a quick check that Wumgr still hooks the right services.

Pricing:

Platforms: Windows.

Download: DavidXanatos GitHub

Bottom line: Wumgr is the friendliest way to freeze Windows Update without editing Group Policy.

5. Windows Update Blocker – best for a one-click block

Windows Update Blocker is a tiny portable tool from Sordum that flips the Windows Update service state between disabled, manual, and automatic. No install, no telemetry, no persistent process. If you just want to stop background updates during a live gig or a critical build, click once and it is done.

Where it falls short: No per-app control, no throttling. It is a service switch, nothing more.

Pricing:

Platforms: Windows.

Download: Sordum.org

Bottom line: Windows Update Blocker is the emergency stop button you keep in the tray.

6. NetBalancer – best for priority queues

NetBalancer works less like a limiter and more like a router QoS layer on the local machine. Give Zoom “high” priority, Windows Update “low”, and background sync “block during work hours,” and NetBalancer arbitrates on every packet. Traffic charts are the most detailed on this list.

Where it falls short: Free tier limits you to five priority rules. Setup takes longer than GlassWire.

Pricing:

Platforms: Windows.

Download: Seriousbit.com

Bottom line: Pick NetBalancer if latency-sensitive apps and heavy background updates share the same link.

7. TrafficMonitor – best for a live traffic tray meter

TrafficMonitor is an open-source tray meter that shows current upload and download rates and a per-process breakdown on click. It cannot throttle by itself, but it pairs perfectly with Windows Group Policy or Wumgr for enforcement and gives you the visibility Windows lacks.

Where it falls short: No blocking, no throttling. Reading tool only.

Pricing:

Platforms: Windows.

Download: Zhongyang219 GitHub

Bottom line: Install TrafficMonitor even if you use another blocker, so you can prove which app spiked the line.

How to pick the right one

Do not use two blockers at once. They fight over the Windows Update service and leave the machine in an in-between state where nothing installs and nothing blocks.

FAQ

How do I turn off Windows Delivery Optimization uploads?

Open Settings, Windows Update, Advanced options, Delivery Optimization. Turn off “Allow downloads from other PCs” for the fastest fix, or set it to “PCs on my local network only” to keep peering inside your house. Group Policy Editor has the same setting under Computer Configuration, Administrative Templates, Windows Components, Delivery Optimization.

Does Windows 11 upload update files to random computers on the internet?

By default yes, if Delivery Optimization is left on the “Devices on my local network, and devices on the Internet” option. On Home editions the setting exists under Advanced Options but is easy to miss. Pro and Enterprise editions can also enforce it through Group Policy.

What is the best free tool to block Windows Update?

Wumgr and Windows Update Blocker are both free and safe. Wumgr keeps more control after the block. Windows Update Blocker is one click, portable, and does not run in the background.

Can I schedule Windows Update to only run at night?

Yes, through Windows Update active hours in Settings (limited window) or through Group Policy on Pro/Enterprise for a stricter schedule. NetLimiter and NetBalancer both let you attach time-based throttling to svchost.exe for finer control on Home editions.

Will blocking Windows Update leave my PC insecure?

Only if you leave it blocked for months. The safe pattern is: block during travel, tethered use, or big work weeks, then release the block over a weekend so cumulative updates install with the network you want them on.