[j-nsp] SRX - CPU utilization exceeds

[sameer mughal]

Hi Luke,

Thanks for the reply. Please refer below output;

 show security flow status
  Flow forwarding mode:
    Inet forwarding mode: flow based
    Inet6 forwarding mode: drop
    MPLS forwarding mode: drop
    ISO forwarding mode: drop
  Flow trace status
    Flow tracing status: off
  Flow session distribution
    Distribution mode: RR-based
  Flow ipsec performance acceleration: off
  Flow packet ordering
    Ordering mode: Hardware

Regarding modes I have learned from this site:
http://net.cmed.us/Home/juniper/flow-vs-packet-mode

Please correct me If I understood something wrong.



On Wed, Sep 20, 2017 at 6:17 PM, Damien Luke <Damien.Luke at ac3.com.au> wrote:

> Are you sure?  BGP and policy options don't require packet mode to be
> enabled.
>
> What does `show security flow status` show under Inet forwarding mode?
> ________________________________________
> From: juniper-nsp <juniper-nsp-bounces at puck.nether.net> on behalf of
> sameer mughal <pcs.sameer1 at gmail.com>
> Sent: Wednesday, 20 September 2017 10:56 PM
> To: Phil Mayers
> Cc: juniper-nsp at puck.nether.net
> Subject: Re: [j-nsp] SRX - CPU utilization exceeds
>
> "packet mode" because we are configuring BGP and route map on this device.
>
> On Wed, Sep 20, 2017 at 4:37 PM, sameer mughal <pcs.sameer1 at gmail.com>
> wrote:
>
> > Hi,
> > Device is working in packet flow.
> >
> > On Wed, Sep 20, 2017 at 3:21 PM, Phil Mayers <p.mayers at imperial.ac.uk>
> > wrote:
> >
> >> Datasheet numbers are often optimistic.
> >>
> >> Is the device forwarding in flow or packet mode? If flow mode, what type
> >> of firewall services (appfw, IDP, etc.) and what is the session rate
> like?
> >> What does the bytes/packet distribution look like?
> >>
> >> On 19 September 2017 08:47:51 WEST, sameer mughal <
> pcs.sameer1 at gmail.com>
> >> wrote:
> >> >Thanks a lot for the reply.
> >> >
> >> >However, as per the available SRX datasheet they can manage 300Mbps
> >> >throughput so why it is showing high CPU in btw 60 to 70 Mbps. This is
> >>
> >> --
> >> Sent from my mobile device, please excuse brevity and typos
> >>
> >
> >
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>