[j-nsp] policer useless

Jason Parsons jparsons-juniper@saffron.org
Wed, 11 Sep 2002 13:19:27 -0400


On Wednesday, Sep 11, 2002, at 10:14 US/Eastern, Daniel Roesen wrote:

> You're doing policing, which sabotages TCP's congestion avoidance
> mechanisms. A problem VERY well known since the days of the IMPs. :-)
>
> Basically, you have no chance. You need to do queuing... with
> policing you're totally lost.

I would love to see some Juniper folks comment on this.  Is there 
really no way to configure a policer and see acceptable TCP throughput 
(and associated congestion avoidance)?  What's the suggested 
configuration for policing a single customer interface down to a lower 
rate, especially if that customer delivers lots of TCP traffic?

   - Jason