[a-nsp] Has anyone made a separated COPP template for EOS?

[Sebastian Wiesinger]

* Drew Weaver via arista-nsp <arista-nsp at puck.nether.net> [2026-08-10 15:20]:
> Good morning.
> 
> I'm fine doing the work myself but if anyone already has a separated COPP template for EOS I would love to look at it.
> 
> I am of course talking about the default one that combines many of the service ports into single rules for some reason that I cannot fathom.
> 
> Specifically rules like 80, etc below.
> 
> Are there platform limitations to the number of lines in one of these ACLs that made it a requirement to do the default this way?

Hello,

we have our own COPP ACLs with much less rules. As these rules get
translated to Linux Netfilter (iptables) rules, there is no
hardware/platform limitation for these. If there is a software
limitiation I'm not aware of it.

I also don't see any apparent problem with the default ruleset, they
grouped rules if possible which I don't mind, it's a style choice I
guess?

Best Regards

Sebastian

-- 
'Are you Death?' ... IT'S THE SCYTHE, ISN'T IT? PEOPLE ALWAYS NOTICE THE SCYTHE.
            -- Terry Pratchett, The Fifth Elephant