[c-nsp] DS-3 -> OC-3 upgrade

[Justin M. Streiner]

On Mon, 16 May 2005, Gert Doering wrote:

> What's "relatively low pps" for you?  A NPE-G1 should be able to shove
> through a OC-3 worth of 64byte packets with a load below 50% - unless
> you have "evil" features enabled, IP accounting being the worst of them.

I saw this router buckle under a ~50kpps ICMP flood on top of the normal 
traffic.  It dropped out of the IBGP mesh and lost all OSPF adjacencies.
The interfaces were still up, do the router still had enough juice to 
handle keepalives, but it was pretty much unresponsive to all admin 
connections - console was barely usable.  This was traffic directed at a 
customer behind the router, not to the router itself.

7206VXR, NPE-G1 w/ 512 MB RAM
1 PA-GE to another building
1 DS3 to an upstream provider, full BGP feed (130-140k routes at the time)
1 DS3 to another building
1 FE into the core switch in that building
1 FE cross-connect to another router in the building
Participated in our IBGP mesh at the time with 5 other routers
OSPF backbone area router
CEF enabled globally
CEF/flow caching enabled on each interface, flows exported to a collector

Beyond that, it was running pretty standard stuff - SNMP, TACACS, etc
normal aggregate traffic peaks were probably around 130-140Mb/s

jms

> (I recently did some torture testing with a NPE-300, and as long as I
> have no extra features enabled, a 100 Mbit/s full of 68-byte-packets
> was handled just fine - and the NPE-G1 is MUCH faster).
>
> You certainly want to block/rate-limit packets *TO* the router - but that's
> good practice anyway.
>
> gert
> -- 
> USENET is *not* the non-clickable part of WWW!
>                                                           //www.muc.de/~gert/
> Gert Doering - Munich, Germany                             gert at greenie.muc.de
> fax: +49-89-35655025                        gert at net.informatik.tu-muenchen.de
>