[nsp] intermitten ping lags on 7500/rsp4/256M

[lexus]

Dmiitri,

Well, if you have gamer customers, you will feel my pain =)

Gamers generally don't like high ping times playing whatever game that
is out there.  When these sporadic 600msec delays come in, the customers
freak out.

I know the BGP scanner plays a big role in this madness, I heard success
stories on 12.0.21 S6, I am going to reload with this image
tonight...and see what happens. 

The other option I was looking at if I can pass all these thru the
vip2;s...instead of going to the rsp4.

-ken

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Dmitri Kalintsev
Sent: Thursday, June 12, 2003 9:38 PM
To: cisco-nsp at puck.nether.net
Subject: Re: [nsp] intermitten ping lags on 7500/rsp4/256M

On Thu, Jun 12, 2003 at 07:48:06PM -0400, Jared Mauch wrote:
> 
> 	What you need is the distributed linecards to inspect packets
> prior to being forwarded to the RE and be able to generate the icmp
> responses at linerate back.  Obviously non-distributed

...which will be ideal for reflective dDoS attacks, for instance. ;)

> platforms (3640, 2600, 2500, 7200, or even 7500 w/ older non-dcef
> capable cards) will not be able to respond in this fashion, but they
> are more likely to not be performing bgp.
> 
> 	This doesn't seem like a too complicated thing to do.

...but, at much closer look, quite useless. ;) Routers are there to
*route*
packets, not to reply to ICMP queries. That is why ICMP processing is
given
such a low priority (and not only by Cisco).

If somebody needs to measure their network characteristics *so* badly,
there's always Cisco SAA which seems to be part of almost everything
Cisco
has nowdays that runs IOS (no, I didn't look at fn, because I'm stubborn
and
lazy).

> 	- jared
---end quoted text---

SY,
-- 
D.K.
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
http://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/