On 2/5/14, 13:24, Jay Ashworth wrote:
The common answer, Octavio, at least*used to* be "our line cards aren't
smart enough to implement strict-unicast-RPF, and our boxes don't have
enough horsepower to handle every packet through the CPU".
As I've noted, I'm not sure I believe that's true of current generation
gear, and if it*is*, then it should cost manufacturers business.
In Cisco 6500 land - which were very popular - Earl7 uRPF is limited to
one of strict or loose (no mixing modes) for IPv4 only. Otherwise you
have to rely on ACLs and the possibility of running out of TCAM space
for them depending on density.
The Sup2T (Earl8) does fix these limitations: uRPF is configurable
per-interface basis and independent of IPv4/IPv6, and can be a mix of
loose or strict mode. But Sup2T only came out in 2011.
~Seth
