[c-nsp] Long list of route-maps

Andy B. globichen at gmail.com
Thu Mar 11 12:37:54 EST 2010


On Thu, Mar 11, 2010 at 6:31 PM, Arie Vayner (avayner)
<avayner at cisco.com> wrote:
> Andy,
>
> 150 BGP peers could be a bit too much for some routers... You did not
> mention your platform and the CPU level before activating this new link.

It's a standard 6500 with SUP720-3BXL and SXI3 IOS

CPU when things are stable - meaning no 300k prefixes are received and
handled by a route-map:

CPU utilization for five seconds: 5%/3%; one minute: 8%; five minutes: 22%
 PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process
 442    32752540  23050084       1420  1.67%  1.83%  3.58%   0 BGP Router
  12    10530960  73568808        143  0.23%  0.32%  0.43%   0 ARP Input
  24     9929364  66536895        149  0.15%  0.15%  0.12%   0 IPC Seat Manager
 550     5590548 104678906         53  0.07%  0.12%  0.17%   0 IPv6 Input
   9    35321344   1775168      19897  0.00%  1.81%  1.61%   0 Check heaps
  52     1741276     44845      38828  0.00%  0.04%  0.05%   0 Per-minute Jobs
 267        2372      2128       1114  0.00%  0.11%  0.02%   1 SSH Process
 273     6081996  48117818        126  0.00%  0.12%  5.80%   0 IP Input
 328     5130588     41932     122354  0.00%  0.13%  0.16%   0 IP Background
 329     1397596   2073628        673  0.00%  0.03%  0.06%   0 IP RIB Update
 353      825140   3638618        226  0.00%  0.02%  0.03%   0 CEF: IPv4 proces
 403     8109668   2461860       3294  0.00%  0.04%  0.16%   0 BGP Scheduler
 493      626732   4529700        138  0.00%  0.04%  0.02%   0 Port manager per
 553     2499400  19689788        126  0.00%  0.08%  0.17%   0 BGP I/O
 557     1455124   3184221        456  0.00%  0.06%  0.03%   0 SNMP ENGINE
 563    58994480    455252     129587  0.00%  1.66%  2.41%   0 BGP Scanner


>
> A few things to check in general which could have impact on BGP
> performance:
> - Do you have BGP Path MTU Discovery enabled?

No, this is not enabled.

> - Increase the ingress hold queue of your ingress interface

I tried that already, but different values did not change much.

> - Check that you do not have a too restrictive COPP policy, which
> creates drops, and hence retransmit ions of packets.

I currently have no COPP at all. But I can assure that the router is
not under any sort of attack. It's always behaving like that when a
larger peer (full table) is sending me prefixes. And right now the
whole mess does not want to stabilize - sometimes it does after 30
minutes, sometimes it takes forever.

More router info:

#sh ver
Cisco IOS Software, s72033_rp Software
(s72033_rp-ADVENTERPRISEK9_WAN-M), Version 12.2(33)SXI3, RELEASE
SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2009 by Cisco Systems, Inc.
Compiled Tue 27-Oct-09 11:12 by prod_rel_team

ROM: System Bootstrap, Version 12.2(17r)SX5, RELEASE SOFTWARE (fc1)

 FRA uptime is 4 weeks, 20 hours, 7 minutes
Uptime for this control processor is 4 weeks, 19 hours, 56 minutes
Time since FRA switched to active is 4 weeks, 19 hours, 55 minutes
System returned to ROM by reload at 22:36:52 CEST Wed Feb 10 2010 (SP by reload)
System restarted at 22:40:49 CEST Wed Feb 10 2010
System image file is "disk0:s72033-adventerprisek9_wan-mz.122-33.SXI3.bin"


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export at cisco.com.

cisco WS-C6504-E (R7000) processor (revision 2.0) with 983008K/65536K
bytes of memory.
Processor board ID FOX1232GUBZ
SR71000 CPU at 600Mhz, Implementation 0x504, Rev 1.2, 512KB L2 Cache
Last reset from s/w reset
3 Virtual Ethernet interfaces
26 Gigabit Ethernet interfaces
4 Ten Gigabit Ethernet interfaces
1917K bytes of non-volatile configuration memory.
8192K bytes of packet buffer memory.

65536K bytes of Flash internal SIMM (Sector size 512K).
Configuration register is 0x2102


More information about the cisco-nsp mailing list