[j-nsp] estimating affects on firewall filter configuration on MPC throughput?

Adam Vitkovsky Adam.Vitkovsky at gamma.co.uk
Tue Nov 10 05:36:01 EST 2015

Hello Michael,

> Of Michael Hare
> Sent: Thursday, November 05, 2015 4:01 PM
> Hello-
> I'm looking for knowledge on how a given Juniper firewall filter config affects
> forwarding performance, specifically on an MPC4.  I don't have 100G+ traffic
> generation at my disposal for direct testing.
> The specific concern is that we have a dozen or two 'then next-term'
> counting terms on internet ingress for purposes of crude thresholding [things
> like UDP 53 > 1400 byte, etc].  I know that minimizing 'then next-term' is
> recommended, and there is a hard cap of roughly 2^10 on next-term use [of
> which I am nowhere near].
You won't find this info anywhere unfortunately.
If you are using just couple dozens of FW terms there should be no noticeable performance impact you might run into other chokepoints before you hit the LU performance ceiling.
That's why it's essential to test with your setup (all the features you use or plan on using in near future) before deployment into production.


        Adam Vitkovsky
        IP Engineer

T:      0333 006 5936
E:      Adam.Vitkovsky at gamma.co.uk
W:      www.gamma.co.uk

This is an email from Gamma Telecom Ltd, trading as “Gamma”. The contents of this email are confidential to the ordinary user of the email address to which it was addressed. This email is not intended to create any legal relationship. No one else may place any reliance upon it, or copy or forward all or any of it in any form (unless otherwise notified). If you receive this email in error, please accept our apologies, we would be obliged if you would telephone our postmaster on +44 (0) 808 178 9652 or email postmaster at gamma.co.uk

Gamma Telecom Limited, a company incorporated in England and Wales, with limited liability, with registered number 04340834, and whose registered office is at 5 Fleet Place London EC4M 7RD and whose principal place of business is at Kings House, Kings Road West, Newbury, Berkshire, RG14 5BY.

More information about the juniper-nsp mailing list