[c-nsp] ISG and HTTP redirection

[Tassos Chatzithomaoglou]

That 500 number seems quite stange, since 10k is the "strongest" of the 3 platfroms ISG is supported.

We're using 10k for L2TP termination and we know that when traffic is punted to the RP, 10k gets on 
its knees.

But according to http://www.cisco.com/en/US/products/ps6588/prod_bulletin0900aecd804a2c70.html :

"High-performance design scales to 32,000 sessions with the Performance Routing Engine 2 (PRE-2) and 
up to 40,000 sessions with PRE-3 on the Cisco 10000 Series. The Cisco 7200 Series and Cisco 7301 
scale from 4000 to 8000 sessions. Performance can vary depending on the configuration."

I find it very difficult to believe that the "Performance can vary depending on the configuration" 
could mean "if you use L4 redirect on the 10k, you get only 500 sessions".

Of course i could be wrong, but since we're already evaluating ISG (on a 7200 now, on a 10k later) 
and L4 redirect is a needed feature, i wish i'm not ;)


PS: I just show the "Permanent" word you used, so i guess this is probably what makes it a problem...

Regards,
Tassos


Aleksey V Fedorov wrote on 11/10/2006 9:13 πμ:
> Hi!
> 
> Permanent L4redirect will cause very high CPU usage.
> Because L4 redirect is a translation and all of these
> packets are punted to RP on a 10K.  Cisco recommand using
> other means to do permanent l4redirect, for instance using
> PBR.
> 
> With L4redirect turned on for 500 sessions we achieve:
> c10008-a77#sh processes cpu | i CPU
> CPU utilization for five seconds: 84%/74%; one minute: 75%; five minutes: 78%
> 
> while without L4redirect CPU util is about 0%.
> 
> 
> On Tue, 10 Oct 2006, Dean Albano wrote:
> 
>> Can a service provider use ISG on a 10K to redirect HTTP traffic to a
>> cluster of proxy servers?  We are interested in this to redirect user
>> HTTP traffic to a cluster of proxy servers without resorting to WCCP
>> or PBR.
> 
> 
> --
> Aleksey V. Fedorov <alexf at vsi.ru>  AVF12-RIPE
> Phone: +7(0732)531789, +7(0732)001390
> Fax:   +7(0732 531789         http://www.vsi.ru
> CenterTelecom Voronezh ISP    http://isp.vsi.ru
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/