[j-nsp] Juniper SRX assigning IPSec VPN to SPU

[Michael Gehrmann]

Were you thinking of the VPN session-affinity feature?

This ties into the ipsec performance acceleration.

http://www.juniper.net/techpubs/en_US/junos12.3x48/topics/task/configuration/security-vpn-session-affinity-enabling.html
http://www.juniper.net/techpubs/en_US/junos12.3x48/topics/task/configuration/ipsec-vpn-traffic-performance-security-accelerating.html

Cheers
Mike

On 14 November 2015 at 02:15, Niklas Hoglund <niklas at hoglund.pp.se> wrote:

> Hi,
>
> anyone seen if its possible to statically assign a IPSec VPN to a
> particular SPU?
>
> ... I've seen that its possible to do resource allocation (as per
>
> http://www.juniper.net/documentation/en_US/junos12.1/topics/concept/logical-system-security-cpu-allocation-control-understanding.html
> )
> but, still I would like to separate "heavy" IPSec VPNs on different SPUs (I
> loose redundancy I understand). When SPU is highly loaded I can see the
> latency going up...
>
> Should be some (hidden?) command somewhere... =)
>
> //Regards, Niklas
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>



-- 
Michael Gehrmann
Senior Network Engineer - Atlassian
m: +61 407 570 658