[c-nsp] NBAR & QoS

[Church, Charles]

>From what I've seen, NBAR doesn't use a whole lot of memory, it'll grab
a small amount off the bat when you enable it, and that's it.  Maybe 10
megs.  I'm not familiar with 12.2SB though.  I think you'd have to read
the release notes for NBAR in the two trains.  They've added more
protocol support in the newer trains, that might be reason enough.
Unless you can add the PDLMs to 12.2SB.  I think 12.4 would be the most
troublefree path though.
 
Chuck 
________________________________

From: root net [mailto:rootnet08 at gmail.com] 
Sent: Wednesday, September 10, 2008 11:28 AM
To: Church, Charles
Cc: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] NBAR & QoS


Chuck,

I am pushing about 13Mbit with the small DSL base and sub interfaces.  I
expect to push more here by the end of Oct and wanted to make sure we
are throttling the file sharing before it gets bad.  I am running 12.2
SB what advantages do I have for running 12.4?  Also what does your
memory look like?

rootnet


On Wed, Sep 10, 2008 at 6:57 AM, Church, Charles <cchurc05 at harris.com>
wrote:


	We're using it on a 2821 for the same purpose - QOS to 2
upstreams, and
	file sharing shaping.  Currently running about 10% CPU when
pushing
	about 9mb through it.  It's probably good for almost a full DS-3
on the
	2821, at least in our application.  If you can run 12.4 on the
NPE225,
	I'd say enable it on a couple subints (protocol discovery) at a
time,
	and keep an eye on the cpu.  If CPU stays low, keep adding to
it.  I
	seem to remember having some weird NBAR issues with 12.3.   How
much
	traffic are you pushing through it currently?  20 to 30
customers
	doesn't sound like it'd be a problem.
	
	Chuck
	

	-----Original Message-----
	From: cisco-nsp-bounces at puck.nether.net
	[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of root net
	Sent: Wednesday, September 10, 2008 4:32 AM
	To: cisco-nsp at puck.nether.net
	Subject: [c-nsp] NBAR & QoS
	
	
	Hello,
	
	I am looking into running NBAR along side with QoS in our
network.  I
	was
	wondering what the list was doing if running NBAR.  I want to
protect
	against excessive file sharing customers or at least throttle
those
	specific
	applications.  Some suggestions as the best place to configure
this in a
	network or what you all are doing is appreciated? Maybe even
running on
	a
	mirror port?
	
	My thoughts are placing on Cisco 7206 NPE-225/256MB box but am
not sure
	if
	we should upgrade to a 7204VXR NPE-400/512Mb or not. This box
runs
	terminates static (no PPPoE) DSL customers and about 20 to 30
	subinterfaces.  Although may move to PPPoE in the future. CPU
usage is
	light
	and memory operates around 120MB free give or take.
	
	Thanks in advanced!
	
	RootNet08
	
	_______________________________________________
	cisco-nsp mailing list  cisco-nsp at puck.nether.net
	https://puck.nether.net/mailman/listinfo/cisco-nsp
	archive at http://puck.nether.net/pipermail/cisco-nsp/