[a-nsp] Has anyone made a separated COPP template for EOS?

[Gert Doering]

Hi,

On Thu, Aug 20, 2026 at 06:11:59PM +0200, Sebastian Wiesinger via arista-nsp wrote:
> we have our own COPP ACLs with much less rules. As these rules get
> translated to Linux Netfilter (iptables) rules, there is no
> hardware/platform limitation for these. If there is a software
> limitiation I'm not aware of it.

I'm wondering about that statement.

To be effective against volumetric crap, the CoPP ACL needs to stop packets
before they fill the (lower-bandwidth) link between "ASIC" and "CPU" - so
I would assume some hardware involvement?

gert
-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             gert at greenie.muc.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 699 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/arista-nsp/attachments/20260820/c5206abf/attachment.sig>