[c-nsp] do i *need* DFCs on the 6500?

Gert Doering gert at greenie.muc.de
Wed Sep 2 10:04:38 EDT 2009


On Wed, Sep 02, 2009 at 07:39:34AM -0500, Justin Shore wrote:
> You eluded to one of my strongest selling points on DFCs though I don't 
> think you made that particular connection yet.  DFCs offload QoS to the 
> LC as you said.  That also means that CoPP is also handled in hardware 
> if you have DFCs in place since it requires MLS QoS on that platform. 
> Ie, if your 6500/7600 is going to be publicly-accessible on the Internet 
> in any capacity and you want it to be able to use CoPP to withstand a 
> targeted DoS attack then DFCs are not optional, they're critical.

Why?  Wouldn't the Sup PFC handle "CoPP-in-hardware" if you have no DFCs?

(Assuming that the total incoming packet volume is still inside the 
bounds that the PFC can handle)

USENET is *not* the non-clickable part of WWW!
Gert Doering - Munich, Germany                             gert at greenie.muc.de
fax: +49-89-35655025                        gert at net.informatik.tu-muenchen.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 304 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/cisco-nsp/attachments/20090902/e8c5b323/attachment.bin>

More information about the cisco-nsp mailing list