[c-nsp] 12.2(33)SRA is finally out!

Asbjorn Hojmark - Lists lists at hojmark.org
Tue Jun 27 16:26:51 EDT 2006


Thanks. Very UI.

-A

> -----Original Message-----
> From: Tim Stevenson [mailto:tstevens at cisco.com] 
> Sent: Tuesday, June 27, 2006 5:40 PM
> To: Ian Henderson; Asbjorn Hojmark - Lists
> Cc: cisco-nsp at puck.nether.net
> Subject: Re: [c-nsp] 12.2(33)SRA is finally out!
> 
> The model is that the ACL TCAM is programmed to punt just
> initial TCP SYN packets to the RP CPU so the MSS can be
> modified as it transits the router.
> 
> Yes, this has implications for the CPU utilization in the face
> of heavy SYN traffic - you can configure the ACL bridge input
> rate limiter on PFC3 to rate limit traffic punted due to an ACL
> bridge result (mls rate-limit unicast acl input <rate>), but
> doing so could be a tradeoff between CPU & session
> establishment time.
> 
> Thanks,
> Tim




More information about the cisco-nsp mailing list