Hi, I look after school network but I'm certainly not a network specialist, I do everything. 50 Ruckus AP's hooked to Allied Telesis switches in around 10 different buildings, all coming back to a core switch. We have around 1200 devices on the wireless on 3 SSIDs, staff, students, other stuff. 802.1x auth to NPS. Most of those devices are MacOS or iOS. The network is flat. We don't have VLANs. Are you cringing yet?
The broadcast packets are starting to kill us slowly with around ~100 broadcast/s and 200-300 multicast/s, the Ruckus APs are certainly struggling to keep up. A Wireshark shows that most of it is mDNS, Bonjour traffic, and a smaller amount of IPv6 broadcasts. They drop to around 10% of those levels overnight (we have 1/4 users resident).
The Bonjour is being used primarily for printer finding, and Apple TV's, so doesn't need to be broadcast between outlying buildings.
I'm looking for advice on strategies to deal with this. VLAN per building? Some sort of ACL on the core switch to keep those broadcasts in the building for the AppleTV's and to the print server attached to the core?