[j-nsp] Slow RE path 20 x faster then PFE path

Robert Raszuk robert at raszuk.net
Tue Mar 24 04:24:36 EDT 2020


Yes NAT is configured there as I indicated via presence of si- phantom load
... Having NAT there is not my idea though :). But sorry can not share the
config.

If you could shed some more light on your comment how to properly configure
it and what to avoid I think it may be very useful for many folks on this
list.

Many thx,
R.



On Tue, Mar 24, 2020 at 5:00 AM Alexander Arseniev <arseniev at btinternet.com>
wrote:

> Hello,
>
>
>
> Another interesting observation is that show command indicated services
> inline input traffic over 33 Mpps zero output while total coming to the box
> was at that time 1 Mpps ....
>
>
> Do You have inline NAT configured on this box? Is it possible to share the
> config please?
> It is quite easy to loop traffic with NAT (inline or not) and while looped
> inside same box,
> TTL does not get decremented so You end up with eternal PFE saturation.
>
> Thanks
> Alex
>


More information about the juniper-nsp mailing list