[j-nsp] Network-control queue counter increases on ccc-configured interface

[Mark Tinka]

On Friday, January 27, 2012 04:01:49 PM Saku Ytti wrote:

> The feature is there and has been for >decade in IOS for
> good reason, there are some people who really have
> customers who are not created equal and some needs to
> have higher privilege to live during congestion than
> others.
> 
> I fully accept that there are lot of businesses where all
> customers are created equal, and dropping one INET
> packet is same as any other. But if this is not the
> case, I welcome people to rethink the assumption that
> customers who pay 300USD for 2Mbps L3MPLS VPN with
> centralized INET access should be treated same way as
> customer who pays <2000USD for 6Gbps IP Transit.

We have a very comprehensive DCU and QPPB deployment in our 
Cisco/Juniper network for one of our most popular and 
profitable products (and it's extensible to provide even 
kinkier features and tools that can be as wild as one's 
imagination), but as a DoS attack is the premise that can 
seriously mess with your network, the differences with which 
folk handle that issue may allow them to have a different 
policy on how they treat customers of differing value.

Like I said, neither option is right or wrong, just right 
enough for one's network.

Mark.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part.
URL: <https://puck.nether.net/pipermail/juniper-nsp/attachments/20120127/17fcbff9/attachment.sig>