[c-nsp] IOS-hosted DHCP rate-limiting

[Łukasz Bromirski]

Justin Shore wrote:
> I just killed the PVC of a DSL customer that was sending exactly 115 
> DHCP DISCOVER messages per second.  That caused a 600% increase on the 
> CPU of the NPE-G1 that the PVC terminates on and the DHCP is currently 
> being run on.  Are there any DHCP rate-limiting features built into the 
> IOS that could be used to throttle either how often the router will 
> respond to certain received queries, to queries from a single host, or 
> the rate at which queries can be punted to the CPU for processing?

Check the Control Plane Policing deployment guide:
http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6642/prod_white_paper0900aecd804fa16a.html

-- 
"Don't expect me to cry for all the     |               Łukasz Bromirski
  reasons you had to die" -- Kurt Cobain |    http://lukasz.bromirski.net