[j-nsp] Burst size for policing

[Luca Salvatore]

My appologies, it is actually the INPUT filter which is not working correctly.
If i run speedtest.net it is the upload speed which goes much higher than the 40Mb policer.  Uploading means Input filter.

I will see if I can find another way to test

Luca


-----Original Message-----
From: Huan Pham [mailto:drie.huanpham at gmail.com] 
Sent: Tuesday, 29 January 2013 8:50 AM
To: Luca Salvatore
Cc: juniper-nsp at puck.nether.net
Subject: Re: [j-nsp] Burst size for policing


Hmm, if you can show / monitor interface on your FW during the peak time, that would give you the actual speed customer gets.

Alternatively, can you try downloading or uploading a big file and see what is the speed customer gets?

The above methods are more realistic.

Speedtest is performed in a very short time using PING or UDP and the rate shown may be subject to your burst size config.

I would not lower the burst size just to have the speedtest number right.






On 29/01/2013, at 8:26 AM, Luca Salvatore <Luca at ninefold.com> wrote:

> It is dropping packets yes, but my external speedtests show speeds at 70Mb.
> I'm not using any show commands to verify this, it is all external tests.
> 
> Luca
> 
> 
> -----Original Message-----
> From: Huan Pham [mailto:drie.huanpham at gmail.com] 
> Sent: Tuesday, 29 January 2013 7:49 AM
> To: Luca Salvatore
> Cc: juniper-nsp at puck.nether.net
> Subject: Re: [j-nsp] Burst size for policing
> 
> 
> I am sure your policer is dropping traffic, and you can see the number of drops via:
> 
> "show policer". 
> 
> You may be able to work out roughly the rate of dropping based on the change in this number.
> 
> 
> 
> On 29/01/2013, at 7:43 AM, Huan Pham <drie.huanpham at gmail.com> wrote:
> 
>> 
>> I am sure your policer is dropping traffic, and you can see the number of drops via "show firewall". You may be able to work out roughly the rate of dropping based on the change in this number.