[j-nsp] RIB -> FIB filtering.

Sebastian Wiesinger juniper-nsp at ml.karotte.org
Sun Nov 10 14:15:51 EST 2013


* Matjaz Straus Istenic <matjaz at njetwork.si> [2013-11-10 16:27]:
> Fat fingers, sorry:
> 
> On 10. nov. 2013, at 09:07, Matjaz Straus Istenic
> <matjaz at njetwork.si> wrote:
> 
> > If your upstream is using juniper gear, it would (technically
> > speaking, of course) very hard for them to implement such a
> > service.
> ...it would _not_ be very hard...

Except that the troughput in your box will suffer when flowspec is
used for many routes/filters. Someone from Juniper told me that they
couldn't give me numbers but that the performance will degrade with
many flowspec rules. Don't know if that has changed in the meantime
but it was like that last year at least.

Regards

Sebastian

-- 
GPG Key: 0x93A0B9CE (F4F6 B1A3 866B 26E9 450A  9D82 58A2 D94A 93A0 B9CE)
'Are you Death?' ... IT'S THE SCYTHE, ISN'T IT? PEOPLE ALWAYS NOTICE THE SCYTHE.
            -- Terry Pratchett, The Fifth Elephant


More information about the juniper-nsp mailing list