[j-nsp] Netflow/Jflow
Olivier Benghozi
olivier.benghozi at wifirst.fr
Thu Nov 3 21:04:13 EDT 2016
Hi Keith,
Adjusting the size of the flow hash table will reboot the FPC.
In 14.2 and previous, you have everything (15) for IPv4 and only a few entries for IPv6 and VPLS (0). Each unit is 256K flows (except for 0).
Starting from 15.1R, all flow tables have a default size of "0" (that is, a mini-minimum of space, 1024 flows), so in 15.1+, fixing the sizing of the flow-tables is more or less mandatory.
This is the kind of generic config we use here to avoid an FPC reboot, would we need some unplanned stuff with inline-jflow (that you may adjust according to your needs, would you have plenty of IPv6 flows...). You have 15 units of 256K to spend.
groups {
chassis-fpc-netflow {
chassis {
fpc <*> {
sampling-instance sample-1;
inline-services {
flow-table-size {
ipv4-flow-table-size 12;
ipv6-flow-table-size 2;
vpls-flow-table-size 1;
ipv6-extended-attrib;
}
}
}
}
}
}
chassis {
fpc 0 {
apply-groups chassis-fpc-netflow;
}
}
Olivier
> On 3 nov. 2016 at 23:43, Keith <kwoody at citywest.ca> wrote :
>
> One thing about inline that Juniper config docs say is about the flow-table size. I had someone
> tell me enabling inline jflow will cause the fpc to reboot, but from what I read adjusting the size
> of the flow hash table will cause that.
>
> Any idea what is correct here? I would think that just enabling it would not cause an FPC to restart.
More information about the juniper-nsp
mailing list