[c-nsp] IDSM load splitting with EC on C6k

Peter Rathlev peter at rathlev.dk
Mon Jan 28 16:23:25 EST 2008


On Mon, 2008-01-28 at 13:56 +0100, Peter Rathlev wrote:
> First, the load splitting uses the standard EC hashing to make sure all
> packets from the same flow uses the same IDSM. What worries me is that
> communication between two hosts, e.g. a TCP stream, is actually two
> different flows. So I could have client->server traffic using one IDSM
> and server->client traffic using another. Doesn't that mean that the
> IDSM cannot identify bad streams, or do they work in a way that makes
> this a non-issue?

Thinking about this for a while, I can see I overlooked something. Using
a Src XOR Dst algorithm will give the same result for Src->Dst as for
Dst->Src, so that way I can always force both parts of the flow through
the same box. Just needed that extra cup of coffee. :-)

Still unsure about the DFC/SPAN/classic bus issue though...

Regards,
Peter




More information about the cisco-nsp mailing list