[c-nsp] 2611xm slowed to crawl, ip based filter...

Rodney Dunn rodunn at cisco.com
Wed Sep 8 11:50:23 EDT 2004


On Wed, Sep 08, 2004 at 10:25:58AM -0500, Church, Chuck wrote:
> Is this along the same lines as the 'turbo' or 'compiled' ACLs on the
> PIX and distributed routers? 

Well, PXF uses a compile algorithm to fit the ACL's in hardware.
Those are very optimized algorithms for just that purpose.

This is for software based ACL lookups in the beginning.
It may or may not be used in the hardware implementations
in the future.

Distributed (such as 75xx) that does software based forwarding
would see an improvment with this over a normal ACL lookup.

Rodney


> 
> 
> Chuck Church
> Lead Design Engineer
> CCIE #8776, MCNE, MCSE
> Netco Government Services - Design & Implementation
> 1210 N. Parker Rd.
> Greenville, SC 29609
> Home office: 864-335-9473
> Cell: 703-819-3495
> cchurch at netcogov.com  <-note new address!
> PGP key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x4371A48D
> 
> 
> -----Original Message-----
> From: cisco-nsp-bounces at puck.nether.net
> [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Niels Bakker
> Sent: Wednesday, September 08, 2004 11:18 AM
> To: Rodney Dunn
> Cc: cisco-nsp at puck.nether.net
> Subject: Re: [c-nsp] 2611xm slowed to crawl, ip based filter...
> 
> Rodney,
> 
> * rodunn at cisco.com (Rodney Dunn) [Wed 08 Sep 2004, 17:13 CEST]:
> > You should also consider going to 12.3(4)T or
> > later code that has the new TRIE based ACL's.
> > They are much faster lookups.
> 
> Does that also apply to platforms besides the 2611XM?
> 
> Thanks,
> 
> 
> 	-- Niels.
> 
> -- 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 
> 
> ----------------------------------------------------------------------------
>  NOTE: As of 8/1/2004 my email address has changed to cchurch at netcogov.com
> ----------------------------------------------------------------------------
> 


More information about the cisco-nsp mailing list