[j-nsp] GRE tunnels on a QFX10002-60C

Mark Tinka mark at tinka.africa
Mon Jun 27 12:04:55 EDT 2022



On 6/24/22 11:01, Saku Ytti wrote:

> Many ways to skin the cat. If you can dedicate small router to the
> scrubber (or routing-instance if you can't) and you run BGP-LU, so you
> avoid useless egress IP lookup, you just ensure that the scrubber PE
> or scrubber instance doesn't have the more specific routes, then it'll
> follow the BGP-LU path to egress CE.
> You can scrub any and all prefixes, without any scale implications as
> you never need to touch the network to handle clean traffic.

Agreed.

We use the MX204 as the dedicated router attached to the scrubber, so 
there is no performance issue (yet).

Mark.


More information about the juniper-nsp mailing list