[c-nsp] 12.2(33)SRA is finally out!
Asbjorn Hojmark - Lists
lists at hojmark.org
Tue Jun 27 16:26:51 EDT 2006
Thanks. Very UI.
-A
> -----Original Message-----
> From: Tim Stevenson [mailto:tstevens at cisco.com]
> Sent: Tuesday, June 27, 2006 5:40 PM
> To: Ian Henderson; Asbjorn Hojmark - Lists
> Cc: cisco-nsp at puck.nether.net
> Subject: Re: [c-nsp] 12.2(33)SRA is finally out!
>
> The model is that the ACL TCAM is programmed to punt just
> initial TCP SYN packets to the RP CPU so the MSS can be
> modified as it transits the router.
>
> Yes, this has implications for the CPU utilization in the face
> of heavy SYN traffic - you can configure the ACL bridge input
> rate limiter on PFC3 to rate limit traffic punted due to an ACL
> bridge result (mls rate-limit unicast acl input <rate>), but
> doing so could be a tradeoff between CPU & session
> establishment time.
>
> Thanks,
> Tim
More information about the cisco-nsp
mailing list