[f-nsp] side effects of vlan-cpu-protection?

[Gunther Stammwitz]

Hi Guys,

 

I'm trying to improve the stability of my MLX/XMR under
layer2-loop-conditions  and came across the "vlan-cpu-protection"-feature.

 

Does anyone know about the side effects of vlan-cpu-protection in
combination with routing protocols like OSPF and BGP or with vrrp?

 

The manual says "When using routing protocols (like OSPF etc.) on a specific
VLAN, you need to disable VLAN CPU protection for it to work." 

I guess this means that during a flood condition routing-protocol-packets
might get lost as they are filtered - or better rate limited - on their way
to the cpu like all ordinary packets.

 

Doesn't sound too bad. I'd prefer a layer3-protocol-flap over a system
that's lost because it's cpu is on 100% and it doesn't even switch packets
nor does it route anymore at all.

 

What are your recommendations?

Any pros / cons for the feature?

Gunther

 

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/foundry-nsp/attachments/20100723/08bfae85/attachment.html>