[c-nsp] do i *need* DFCs on the 6500?
Gert Doering
gert at greenie.muc.de
Wed Sep 2 10:04:38 EDT 2009
Hi,
On Wed, Sep 02, 2009 at 07:39:34AM -0500, Justin Shore wrote:
> You eluded to one of my strongest selling points on DFCs though I don't
> think you made that particular connection yet. DFCs offload QoS to the
> LC as you said. That also means that CoPP is also handled in hardware
> if you have DFCs in place since it requires MLS QoS on that platform.
> Ie, if your 6500/7600 is going to be publicly-accessible on the Internet
> in any capacity and you want it to be able to use CoPP to withstand a
> targeted DoS attack then DFCs are not optional, they're critical.
Why? Wouldn't the Sup PFC handle "CoPP-in-hardware" if you have no DFCs?
(Assuming that the total incoming packet volume is still inside the
bounds that the PFC can handle)
gert
--
USENET is *not* the non-clickable part of WWW!
//www.muc.de/~gert/
Gert Doering - Munich, Germany gert at greenie.muc.de
fax: +49-89-35655025 gert at net.informatik.tu-muenchen.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 304 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/cisco-nsp/attachments/20090902/e8c5b323/attachment.bin>
More information about the cisco-nsp
mailing list