<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Ballontekst Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.hoenzb
{mso-style-name:hoenzb;}
span.E-mailStijl18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.BallontekstChar
{mso-style-name:"Ballontekst Char";
mso-style-priority:99;
mso-style-link:Ballontekst;
font-family:"Tahoma","sans-serif";
mso-fareast-language:NL;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=NL link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>Hi,<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>Thanks for the feedback. I have ip/icmp redirect disabled, that should not be the issue on its own. The only thing that may have some relation with it is that on the CER ip(v4) redirects cannot be disabled global (though it can and is by default for IPv6).<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>I actually use a virtual interface and also tried it directly on the physical interface but that makes no difference.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>interface ve 11<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'> port-name AMS-IX<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'> ip address {ipv4-address}/21<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'> no ip redirect<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'> ipv6 address {ipv6-address}/64<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'> ipv6 enable<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>ipv6 nd suppress-ra<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>!<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>interface ethernet 2/1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'> delay-link-event 20<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'> enable<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'> route-only<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'> sflow forwarding<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>!<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>#sh ip int ve 11<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>….<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'> ip icmp redirect: disabled<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>#sh ipv6 int ve 11<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>….<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'> ICMP redirects are disabled<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>Kind regards,<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>Bardo Cornelissen<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>Caveo Internet BV<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'><a href="http://www.caveo.nl/"><span lang=EN-US>http://www.caveo.nl</span></a></span><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>Van:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Mat Perkins [mailto:mat@instavps.com] <br><b>Verzonden:</b> woensdag 29 oktober 2014 15:55<br><b>Aan:</b> Youssef Bengelloun-Zahr<br><b>CC:</b> Bardo Cornelissen; foundry-nsp@puck.nether.net<br><b>Onderwerp:</b> Re: [f-nsp] Unexpected CPU load on NetIron CER<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>I think the key here is:<o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>no ip redirect</span><o:p></o:p></p></div><div><p class=MsoNormal><span style='font-family:"Arial","sans-serif"'>no ip icmp redirects</span><o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><span style='font-family:"Arial","sans-serif"'>I have this running system wide, and I'm not on AMS-IX but I am on SIX</span><o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><div><p class=MsoNormal><span style='font-family:"Arial","sans-serif"'>show cpu lp<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Arial","sans-serif"'>SLOT #: LP CPU UTILIZATION in %:<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Arial","sans-serif"'> in 1 second: in 5 seconds: in 60 seconds: in 300 seconds:<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Arial","sans-serif"'> 1: 1 1 1 1<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Arial","sans-serif"'> 3: 1 1 1 1<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Arial","sans-serif"'><o:p> </o:p></span></p></div></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><span style='font-family:"Arial","sans-serif"'>Mat</span><o:p></o:p></p></div></div><div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>On Wed, Oct 29, 2014 at 3:09 AM, Youssef Bengelloun-Zahr <<a href="mailto:youssef@720.fr" target="_blank">youssef@720.fr</a>> wrote:<o:p></o:p></p><div><div><div><div><div><p class=MsoNormal style='margin-bottom:12.0pt'>Hello Bardo,<o:p></o:p></p></div><p class=MsoNormal style='margin-bottom:12.0pt'>Running an MLXe-4 box (NI 5.4.0.d) connected to AMS-IX via 1G port, here is my config :<br><br>interface ethernet 3/3<br> port-name to PEERING : AMS-IX (EDGE-TC5-019 GE-2/1)<br> enable<br> load-interval 30<br> ip address blablablabla/21<br> no ip redirect<br> ip mtu 1500<br> ipv6 address blablablabla/64<br> ipv6 enable<br> ipv6 nd suppress-ra<br> sflow forwarding<o:p></o:p></p></div><p class=MsoNormal style='margin-bottom:12.0pt'>No unusual high cpu-utilization :<br><br>09:08:34 GMT+00 Wed Oct 29 2014<br><br>SLOT #: LP CPU UTILIZATION in %:<br> in 1 second: in 5 seconds: in 60 seconds: in 300 seconds:<br> 3: 4 5 5 6 <br><br><o:p></o:p></p></div><p class=MsoNormal style='margin-bottom:12.0pt'>Hope this helps.<o:p></o:p></p></div><p class=MsoNormal>Best regards.<o:p></o:p></p><div><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal><o:p> </o:p></p><div><div><div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>2014-10-29 9:58 GMT+01:00 Bardo Cornelissen <<a href="mailto:b.cornelissen@caveo.nl" target="_blank">b.cornelissen@caveo.nl</a>>:<o:p></o:p></p><p class=MsoNormal>Hi,<br><br>Well that indeed solved the 50-60% load I experienced with "route-only"<br>configured on the interface. I'm still stuck 8% cpu-utilization on LP<br>though. Is anyone on this list connected to AMS-IX with a CER or MLX(e), not<br>experiencing this and willing to compare some interface configuration and<br>debug packet captures?<br><br>#sh cpu lp<br><br>09:37:37 GMT+01 Wed Oct 29 2014<br><br>SLOT #: LP CPU UTILIZATION in %:<br> in 1 second: in 5 seconds: in 60 seconds: in 300 seconds:<br> 1: 8 8 8 8<br> 2: 8 8 8 8<br><br>I'm seeing a lot of these when debugging:<br>**********************************************************************<br>[ppcr_rx_packet]: Packet received<br>Time stamp : 00 day(s) 09h 17m 48s:,<br>**********************************************************************<br>Packet size: 102, XPP reason code: 0x00000000<br>00: 0000 e40c 4010 e00b-1000 0000 0000 0000 FID = 0x0000<br>10: 3333 ff34 0001 0012-f29f 19c0 86dd 6c00 Offset = 0x10<br>20: 0000 0020 3aff 2001-07f8 0001 0000 0000 VLAN = 11(0x000b)<br>30: a502 5542 0001 ff02-0000 0000 0000 0000 CAM = 0x00000(L)<br>40: 0001 ff34 0001 8700-5787 0000 0000 2001 RX Qid = 6<br>50: 07f8 0001 0000 0000-a501 2634 0001 0101 CPU_CODE = 506<br>60: 0012 f29f 19c0 5555-5555 2634 0001 0101<br>70: 55ff ffff ffff ffff-5555 55e9 4003 0450<br>Pri CPU MON SRC PType US BRD DAV SAV DPV SV ER TXA SAS Tag MVID<br>7 1 0 2/1 c 0 1 0 0 0 0 0 0 0 0 0<br><br>2001:07f8:0001:0000:0000:a502:5542:0001 -><br>ff02:0000:0000:0000:0000:0001:ff34:0001 ICMPv6<br><br>**********************************************************************<br>[ppcr_tx_packet] ACTION: Drop packet(reason: Route-only enabled(CV))<br>[ppcr_rx_packet]: Packet received<br>Time stamp : 00 day(s) 09h 17m 48s:,<br>**********************************************************************<br>Packet size: 102, XPP reason code: 0x00000000<br>00: 0000 e40c 4010 e00b-1000 0000 0000 0000 FID = 0x0000<br>10: 3333 ff96 0001 28c0-da85 bb00 86dd 6000 Offset = 0x10<br>20: 0000 0020 3aff fe80-0000 0000 0000 2ac0 VLAN = 11(0x000b)<br>30: da07 3285 bb00 ff02-0000 0000 0000 0000 CAM = 0x00000(L)<br>40: 0001 ff96 0001 8700-c35c 0000 0000 2001 RX Qid = 6<br>50: 07f8 0001 0000 0000-a504 3996 0001 0101 CPU_CODE = 506<br>60: 28c0 da85 bb00 5555-5555 3996 0001 0101<br>70: 55ff ffff ffff ffff-55c8 4003 0450 f9d2<br>Pri CPU MON SRC PType US BRD DAV SAV DPV SV ER TXA SAS Tag MVID<br>7 1 0 2/1 c 0 1 0 0 0 0 0 0 0 0 0<br><br>fe80:0000:0000:0000:2ac0:da07:3285:bb00 -><br>ff02:0000:0000:0000:0000:0001:ff96:0001 ICMPv6<br><br>**********************************************************************<br>[ppcr_tx_packet] ACTION: Drop packet(reason: Route-only enabled(CV))<br>[ppcr_rx_packet]: Packet received<br>Time stamp : 00 day(s) 09h 17m 48s:,<br>**********************************************************************<br>Packet size: 102, XPP reason code: 0x00000000<br>00: 0000 e40c 4010 e00b-1000 0000 0000 0000 FID = 0x0000<br>10: 3333 ff50 0001 28c0-da85 bb00 86dd 6000 Offset = 0x10<br>20: 0000 0020 3aff fe80-0000 0000 0000 2ac0 VLAN = 11(0x000b)<br>30: da07 3285 bb00 ff02-0000 0000 0000 0000 CAM = 0x00000(L)<br>40: 0001 ff50 0001 8700-97e7 0000 0000 2001 RX Qid = 6<br>50: 07f8 0001 0000 0000-a505 6550 0001 0101 CPU_CODE = 506<br>60: 28c0 da85 bb00 5555-5555 6550 0001 0101<br>70: 55ff ffff ffff ffff-55da 4003 0450 f9d2<br>Pri CPU MON SRC PType US BRD DAV SAV DPV SV ER TXA SAS Tag MVID<br>7 1 0 2/1 c 0 1 0 0 0 0 0 0 0 0 0<br><br>fe80:0000:0000:0000:2ac0:da07:3285:bb00 -><br>ff02:0000:0000:0000:0000:0001:ff50:0001 ICMPv6<br><br>**********************************************************************<br><br>Met vriendelijke groet,<br><br>Bardo Cornelissen<br><br>Caveo Internet BV<br>Ambachtsstraat 10<br>3176 PR Poortugaal<br>The Netherlands<br><a href="http://www.caveo.nl" target="_blank">http://www.caveo.nl</a><br><br>Tel: <a href="tel:%2B31-10-5065520" target="_blank">+31-10-5065520</a><br>Fax: <a href="tel:%2B31-10-5065521" target="_blank">+31-10-5065521</a><br><br><br>-----Oorspronkelijk bericht-----<br>Van: foundry-nsp [mailto:<a href="mailto:foundry-nsp-bounces@puck.nether.net" target="_blank">foundry-nsp-bounces@puck.nether.net</a>] Namens Bardo<br>Cornelissen<br>Verzonden: dinsdag 28 oktober 2014 10:01<br>Aan: 'Lutz Knabenreich'; <a href="mailto:foundry-nsp@puck.nether.net" target="_blank">foundry-nsp@puck.nether.net</a><o:p></o:p></p><div><div><p class=MsoNormal>Onderwerp: Re: [f-nsp] Unexpected CPU load on NetIron CER<br><br>Hi,<br><br>Since I'm working on 5500c, that's worth a try ;-)<br><br>Thanks for your feedback!<br><br>Kind regards,<br><br>Bardo Cornelissen<br>Caveo Internet BV<br><a href="http://www.caveo.nl" target="_blank">http://www.caveo.nl</a><br><br><br>-----Oorspronkelijk bericht-----<br>Van: foundry-nsp [mailto:<a href="mailto:foundry-nsp-bounces@puck.nether.net" target="_blank">foundry-nsp-bounces@puck.nether.net</a>] Namens Lutz<br>Knabenreich<br>Verzonden: dinsdag 28 oktober 2014 09:55<br>Aan: <a href="mailto:foundry-nsp@puck.nether.net" target="_blank">foundry-nsp@puck.nether.net</a><br>Onderwerp: Re: [f-nsp] Unexpected CPU load on NetIron CER<br><br>Hi,<br><br> > Has anyone seen similar behavior?<br> ><br> > IronWare : Version 5.5.0cT183 Copyright (c) 1996-2013 Brocade<br>Communications > Systems, Inc.<br> ><br><br>when we started to test the CER 2024F-4x in our environment we discovered<br>high cpu load as well, when using IPv6.<br><br>"sh cpu lp" was at unusual high levels:<br><br>09:15:15 GMT+01 Thu Sep 26 2013<br><br>SLOT #: LP CPU UTILIZATION in %:<br>in 1 second: in 5 seconds: in 60 seconds: in 300 seconds:<br>1: 67 67 67 67<br>2: 67 67 67 67<br><br>The root cause was found in a high amount of ipv6 discovery and<br>solliciatations.<br><br>In our specific case it was fixed in 5500d, and the issue was traced back to<br>the fix made for 459558 in 5500c.<br><br><br>Best regards<br>Lutz Knabenreich<br>--<br>HKN GmbH Tel: +49 211 875505-0<br>Lutz Knabenreich Fax: <a href="tel:%2B49%20211%2087550555" target="_blank">+49 211 87550555</a><br>Hochstadenstr. 5 <a href="http://www.hkn.de" target="_blank">http://www.hkn.de</a><br>47829 Krefeld mailto:<a href="mailto:knabenreich@hkn.de" target="_blank">knabenreich@hkn.de</a><br><br>Technik Standort:<br>In der Steele 29<br>40599 Duesseldorf<br><br>Eingetragen am Amtsgericht Krefeld HRB 12335<br>Geschaeftsfuehrer Lutz Knabenreich<br>_______________________________________________<br>foundry-nsp mailing list<br><a href="mailto:foundry-nsp@puck.nether.net" target="_blank">foundry-nsp@puck.nether.net</a><br><a href="http://puck.nether.net/mailman/listinfo/foundry-nsp" target="_blank">http://puck.nether.net/mailman/listinfo/foundry-nsp</a><br><br>_______________________________________________<br>foundry-nsp mailing list<br><a href="mailto:foundry-nsp@puck.nether.net" target="_blank">foundry-nsp@puck.nether.net</a><br><a href="http://puck.nether.net/mailman/listinfo/foundry-nsp" target="_blank">http://puck.nether.net/mailman/listinfo/foundry-nsp</a><br><br>_______________________________________________<br>foundry-nsp mailing list<br><a href="mailto:foundry-nsp@puck.nether.net" target="_blank">foundry-nsp@puck.nether.net</a><br><a href="http://puck.nether.net/mailman/listinfo/foundry-nsp" target="_blank">http://puck.nether.net/mailman/listinfo/foundry-nsp</a><o:p></o:p></p></div></div></div><p class=MsoNormal><br><br clear=all><o:p></o:p></p></div></div><p class=MsoNormal><span class=hoenzb><span style='color:#888888'>-- </span></span><span style='color:#888888'><br><span class=hoenzb>Youssef BENGELLOUN-ZAHR</span></span><o:p></o:p></p></div></div></div></div></div><p class=MsoNormal><br>_______________________________________________<br>foundry-nsp mailing list<br><a href="mailto:foundry-nsp@puck.nether.net">foundry-nsp@puck.nether.net</a><br><a href="http://puck.nether.net/mailman/listinfo/foundry-nsp" target="_blank">http://puck.nether.net/mailman/listinfo/foundry-nsp</a><o:p></o:p></p></div><p class=MsoNormal><o:p> </o:p></p></div></div></body></html>