[j-nsp] Data Plane Memory in JUNOS 10.3R1.9

Lawrence Wong lawrencewong72 at yahoo.com
Tue Nov 23 11:35:46 EST 2010


Thanks Rob.

How about for the "IDP data plane memory"? Is it preallocated as well?

>> root> show security idp memory
>>
>>
>>    IDP data plane memory statistics:
>>
>>  Total IDP data plane memory : 204 MB
>>                         Used : 31 MB ( 31744 KB ) ( 15.20%)
>>                    Available : 173 MB ( 177152 KB ) ( 84.80%)

Seems like a big waste if the box is running in packet mode and/or IDP is not 
enabled.

Is the 204 MB of memory really used/reserved or is it more of a placeholder on 
the max available to be used?

Regards,



----- Original Message ----
From: Rob Cameron <rcameron at juniper.net>
To: Lawrence Wong <lawrencewong72 at yahoo.com>; "EXT - xmin0s at gmail.com" 
<xmin0s at gmail.com>
Cc: "juniper-nsp at puck.nether.net" <juniper-nsp at puck.nether.net>
Sent: Mon, November 22, 2010 8:26:59 PM
Subject: Re: [j-nsp] Data Plane Memory in JUNOS 10.3R1.9

All of the memory is preallocated and as of today its default usage can
not be decreased. 

Rob Cameron
Manager Technical Marketing Engineering ­ Juniper Networks SRX


On 11/21/10 5:47 PM, "Lawrence Wong" <lawrencewong72 at yahoo.com> wrote:

>Hi Tim,
>
>Thanks, but nope, no effect. :(
>
>Best regards,
>
>
>----- Original Message ----
>From: Tim Eberhard <xmin0s at gmail.com>
>To: Lawrence Wong <lawrencewong72 at yahoo.com>
>Cc: juniper-nsp at puck.nether.net
>Sent: Mon, November 22, 2010 1:43:44 AM
>Subject: Re: [j-nsp] Data Plane Memory in JUNOS 10.3R1.9
>
>Any change after disabling IDP all together?
>
>set system processes idp-policy disable
>
>-Tim Eberhard
>
>On Sun, Nov 21, 2010 at 7:14 PM, Lawrence Wong <lawrencewong72 at yahoo.com>
>wrote:
>> Hi everyone,
>>
>> I'm currently testing out a J4350 in my lab and it's running on the
>>latest
>> 10.3R1.9.
>>
>> I noticed that after even I've configured the J4350 to run in Packet
>>Mode
>> (Security deleted and MPLS enabled and configured), the IDP modules
>>seems to 
>be
>> taking up between 31MB - 204MB of data plane memory.
>>
>> root> show security idp status
>> State of IDP: Disabled,
>>
>> Packets/second: 0               Peak: 0
>> KBits/second  : 0               Peak: 0
>> Latency (microseconds): [min: 0] [max: 0] [avg: 0]
>>
>> Packet Statistics:
>>  [ICMP: 0] [TCP: 0] [UDP: 0] [Other: 0]
>>
>> Flow Statistics:
>>  ICMP: [Current: 0] [Max: 0 ]
>>  TCP: [Current: 0] [Max: 0 ]
>>  UDP: [Current: 0] [Max: 0 ]
>>  Other: [Current: 0] [Max: 0 ]
>>
>> Session Statistics:
>>  [ICMP: 0] [TCP: 0] [UDP: 0] [Other: 0]
>>  Policy Name : none
>>
>> root> show security idp memory
>>
>>
>>    IDP data plane memory statistics:
>>
>>  Total IDP data plane memory : 204 MB
>>                         Used : 31 MB ( 31744 KB ) ( 15.20%)
>>                    Available : 173 MB ( 177152 KB ) ( 84.80%)
>>
>>
>> Does anyone know how I can really "remove" the IDP modules and free up
>>data
>> plane memory?
>>
>>
>> At the same time, I also noticed that the data plane memory is
>>currently set 
>at
>> 576MB unlike earlier JUNOS (non-ES) 9.3 versions whereby memory was
>> reported/used as a lump sum and not specifically broken down.
>>
>> Routing Engine status:
>>    Temperature                 26 degrees C / 78 degrees F
>>    CPU temperature             41 degrees C / 105 degrees F
>>    Total memory              2048 MB Max  1434 MB used ( 70 percent)
>>      Control plane memory    1472 MB Max   927 MB used ( 63 percent)
>>      Data plane memory        576 MB Max   507 MB used ( 88 percent)
>>
>>
>>
>> Would it be possible to increase the amount of data plane memory
>>allocated?
>>
>>
>> TIA!
>>
>>
>>
>>
>> _______________________________________________
>> juniper-nsp mailing list juniper-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/juniper-nsp
>>
>
>
>
>      
>_______________________________________________
>juniper-nsp mailing list juniper-nsp at puck.nether.net
>https://puck.nether.net/mailman/listinfo/juniper-nsp


      



More information about the juniper-nsp mailing list