Re: [j-nsp] J series users bitten by the massive memory use increase with flow mode add, please file jtac cases.

2010-07-23 Thread Mark Tinka
On Thursday, July 22, 2010 07:00:45 pm Pavel Lunin wrote:

 The problem with EX in ISP applications is very limited
 MPLS capabilities. So if you want VPLS or L3VPN in some
 remote location, EX will not save you although it has
 way higher forwarding performance.

Yes, this, indeed, was a problem. But I'm sure Juniper also 
saw that if they shipped a half-decent MPLS code base in the 
1U EX-series platform, it'd be a commercial disaster for 
them.

For this, I can appreciate. Problem is, the MX80 is too 
large and too expensive as a true MPLS in the Access box. 
This, in my opinion, is where I think Juniper dropped the 
ball; and Cisco's new ME3600X/ME3800X is right on cue to 
sweep this market.

Mark.


signature.asc
Description: This is a digitally signed message part.
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] J series users bitten by the massive memory use increase with flow mode add, please file jtac cases.

2010-07-23 Thread Mark Tinka
On Thursday, July 22, 2010 10:48:20 pm Pavel Lunin wrote:

 Ok. But let's be honest, it's tricky. Specially in L3
 metro access where it is easy to get a loop if you don't
 rely on what customers announce to you (I had experience
 of spending weeks on phone with major Russian ISP on
 behalf of the customer, who wanted split AS to work with
 no loops). I believe there are some other examples of
 RIBs not used for forwarding, but normally this is very
 different case than we talked about and you know what
 you use it for. And you anyway have something which uses
 full table for forwarding.  What you call 'routed metro'
 is itself a little bit of a question to discuss how it
 works :)

I'm a firm believer of MPLS in the Access. 

But...

 But, please, let's not continue this. It' s too
 far away from the topic.

... yes, this is way off-topic now :-).

Cheers,

Mark.


signature.asc
Description: This is a digitally signed message part.
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] J series users bitten by the massive memory use increase with flow mode add, please file jtac cases.

2010-07-22 Thread Andy Davidson

On 20 Jul 2010, at 23:14, Christopher E. Brown wrote:

 I know alot of us here have been bitten by this, and the fact that disabling 
 flow mode and
 reverting to packet does not free up any of the ~ 460MB or so being eaten by 
 fwdd/flowd is
 insane.
 I am currently having the This is a design feature, the pre-alloc is 
 planned argument
 with a SE.

It's trash, we've found customers are starting to buy lower end cisco for 
very-small SP environments again.  Cisco 2900 is hoovering up lots of the 
builds that we used to use J4350/6350 for, precisely because of the added 
complexity and total resource of that this flow-mode presents.

 I have no issue with flow features being added, looks great for branch office 
 use.

This trade wont come back until there is a rebuild of JUNOS sans enhanced 
services for J.

Pretty please with cherry on top ?

Andy
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] J series users bitten by the massive memory use increase with flow mode add, please file jtac cases.

2010-07-22 Thread Pavel Lunin


On 21.07.2010 22:34, Christopher E. Brown wrote:

That is exactly our use, up to a couple hundred megs of IP services on
one, a couple hundred of L3 MPLS on another, and L2-circuit/vpls on a third.


Alaska has many small remote locations.  For larger areas, M and MX
platforms are better, and can be justified.
   
Yeah, I understand. Here in Russia, all the locations are remote :) and 
we also bump into the requirements of cheap devices running everything 
including L3VPN/VPLS for a few hundred megs. I would suggest to use 
SRX240H in packet mode and don't even think about full BGP (they can't) 
or upgrade J-series with ‘non-native’ DRAM and flash or (and) just stay 
at 9.3 on J-series.


Don't really believe Juniper will change this behavior.

--
Pavel


___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] J series users bitten by the massive memory use increase with flow mode add, please file jtac cases.

2010-07-22 Thread Pavel Lunin


On 22.07.2010 14:33, Alexandre Snarskii wrote:

we also bump into the requirements of cheap devices running everything
including L3VPN/VPLS for a few hundred megs. I would suggest to use
SRX240H in packet mode and don't even think about full BGP (they can't)
 

You can try the same trick as with ex-series (yes, it's quite possible
to run full-view on ex-4200 series switch and some people do that in
production networks). I never tried it at SRX (do not have one yet),
so if you'll try it - I'd like to hear your experience.
   
Very advanced sort of design :) EX3200/4200 can only support 32k active 
prefixes in FIB. Sure you can keep as many prefixes in RIB as Control 
Plane capable to hold and only few prefixes in FIB but, I am sorry, what 
for? What is the adventure of keeping that hell of routes in RIB if you 
rely on something other for real switching? To feel cool issuing show 
route summary which shows 600k routes instead of 6? :)


The problem with EX in ISP applications is very limited MPLS 
capabilities. So if you want VPLS or L3VPN in some remote location, EX 
will not save you although it has way higher forwarding performance.


--
Pavel

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] J series users bitten by the massive memory use increase with flow mode add, please file jtac cases.

2010-07-22 Thread Pavel Lunin



Example: you run routed metro (or datacenter) ethernet ring, with less
than 12k entries in FIB. One of your customers wants to turn BGP on his
link. There are lots of choices on how to do that:
[...]
But that is one of cases when having full-view in your edge switch RIB
and redistributed to customer fits perfectly.
   
Ok. But let's be honest, it's tricky. Specially in L3 metro access where 
it is easy to get a loop if you don't rely on what customers announce to 
you (I had experience of spending weeks on phone with major Russian ISP 
on behalf of the customer, who wanted split AS to work with no loops). I 
believe there are some other examples of RIBs not used for forwarding, 
but normally this is very different case than we talked about and you 
know what you use it for. And you anyway have something which uses full 
table for forwarding.  What you call 'routed metro' is itself a little 
bit of a question to discuss how it works :) But, please, let's not 
continue this. It' s too far away from the topic.



IIRC, it's quite possible to use closest MX-series router to mix
draft-kompella pseudowire from EX-series into VPLS domain (it was
discussed in this list not so long time ago).
Not sure about L3VPN though.
   
Yeah! You can even have large VC ring of EX4200 and run VLANs instead of 
PWE3. Or some other magic L2 technology like PBB, STP or layer 1 
circuits if you like. But you anyway use switches just as transport 
between customers and service point (MX). It is quite a different story 
than putting cheap routers everywhere and run VPLS/L3VPN on them.


This is what I am speaking about. If you want a cheap network — put 
switches everywhere and run some L2 transport till service points (MX), 
where you put the circuits into instances. If you are brave enough to 
run L3VPN/VPLS everywhere, use MX everywhere. Ok, J series as an 
exception for small remote locations. But if you just put switches or 
even J series everywhere, than be ready to spend nights at work and 
don't say this is the vendor who makes you non-competitive :)


--
Kind regards,
Pavel



___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] J series users bitten by the massive memory use increase with flow mode add, please file jtac cases.

2010-07-22 Thread Pavel Lunin



IIRC, it's quite possible to use closest MX-series router to mix
draft-kompella pseudowire from EX-series into VPLS domain (it was
discussed in this list not so long time ago).
Not sure about L3VPN though.
   

BTW. Kompella? Didn't you mean CCC? EX only support single label MPLS.
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] J series users bitten by the massive memory use increase with flow mode add, please file jtac cases.

2010-07-21 Thread Leigh Porter


This flow mode thing has (IMO) to be one of the most annoying and quite useless 
features.

Perhaps it is useful for firewall/enterprise apps, but please, what else?



--
Leigh


-Original Message-
From: juniper-nsp-boun...@puck.nether.net on behalf of Christopher E. Brown
Sent: Tue 7/20/2010 11:14 PM
To: juniper-...@punk.nether.net
Subject: [j-nsp] J series users bitten by the massive memory use increase with 
flow mode add, please file jtac cases.
 


I know alot of us here have been bitten by this, and the fact that disabling 
flow mode and
reverting to packet does not free up any of the ~ 460MB or so being eaten by 
fwdd/flowd is
insane.


I am currently having the This is a design feature, the pre-alloc is planned 
argument
with a SE.


I have no issue with flow features being added, looks great for branch office 
use.


What is killing be is that flow is not wanted, needed or usable in a 
small-infra use with
multipath and MPLS services, but even disabled flowd is eating half the box 
memory.


52% memory usable at bootup (bare config) is not sane, and a 1GB 6350 used to 
be able to
handle a few thousand igp routed plus a full table with easy and lots of 
headroom, now it
is at 92%




I am pushing this w/ account team and support case, please do the same.  If 
enough people
complain about the insane resource consumption they might actually fix it.


___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] J series users bitten by the massive memory use increase with flow mode add, please file jtac cases.

2010-07-21 Thread Heath Jones
Just a quick thought... what about renaming the flowd binary..?

No I haven't tested it :)


On 20 July 2010 23:14, Christopher E. Brown chris.br...@acsalaska.netwrote:



 I know alot of us here have been bitten by this, and the fact that
 disabling flow mode and
 reverting to packet does not free up any of the ~ 460MB or so being eaten
 by fwdd/flowd is
 insane.


 I am currently having the This is a design feature, the pre-alloc is
 planned argument
 with a SE.


 I have no issue with flow features being added, looks great for branch
 office use.


 What is killing be is that flow is not wanted, needed or usable in a
 small-infra use with
 multipath and MPLS services, but even disabled flowd is eating half the box
 memory.


 52% memory usable at bootup (bare config) is not sane, and a 1GB 6350 used
 to be able to
 handle a few thousand igp routed plus a full table with easy and lots of
 headroom, now it
 is at 92%




 I am pushing this w/ account team and support case, please do the same.  If
 enough people
 complain about the insane resource consumption they might actually fix it.


 ___
 juniper-nsp mailing list juniper-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/juniper-nsp

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] J series users bitten by the massive memory use increase with flow mode add, please file jtac cases.

2010-07-21 Thread Heath Jones
Chris - Is the current situation: that Juniper have said there is no
workaround / configuration change that can be made to stop the allocation of
memory for the flow forwarding information?



On 20 July 2010 23:14, Christopher E. Brown chris.br...@acsalaska.netwrote:



 I know alot of us here have been bitten by this, and the fact that
 disabling flow mode and
 reverting to packet does not free up any of the ~ 460MB or so being eaten
 by fwdd/flowd is
 insane.


 I am currently having the This is a design feature, the pre-alloc is
 planned argument
 with a SE.


 I have no issue with flow features being added, looks great for branch
 office use.


 What is killing be is that flow is not wanted, needed or usable in a
 small-infra use with
 multipath and MPLS services, but even disabled flowd is eating half the box
 memory.


 52% memory usable at bootup (bare config) is not sane, and a 1GB 6350 used
 to be able to
 handle a few thousand igp routed plus a full table with easy and lots of
 headroom, now it
 is at 92%




 I am pushing this w/ account team and support case, please do the same.  If
 enough people
 complain about the insane resource consumption they might actually fix it.


 ___
 juniper-nsp mailing list juniper-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/juniper-nsp

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] J series users bitten by the massive memory use increase with flow mode add, please file jtac cases.

2010-07-21 Thread Christopher E. Brown
On 7/21/2010 3:47 PM, Heath Jones wrote:
 Chris - Is the current situation: that Juniper have said there is no
 workaround / configuration change that can be made to stop the
 allocation of memory for the flow forwarding information?


The current response is that this memory consumption is by design and 
therefor not a bug.


The fact that this makes a J series purchased with the MAX avail memory less 
then 6 months
ago almost out of memory from day 1 does not seem to be getting through.


I keep hammering this point with the SE on the case and am pushing the issue as 
silly
design flaw, fix it through my account team as well.  I hope everyone else 
does the same.
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] J series users bitten by the massive memory use increase with flow mode add, please file jtac cases.

2010-07-20 Thread Jay Hanke
Ditto, I was writing basically the same email when I saw your post come
through. I got a set of 2350's out of the box running 60% memory
utilization, I added a l3 vpn (with 3 routes) and the nice green bar in the
web interface changed colors on me.

Thanks,

Jay

-Original Message-
From: juniper-nsp-boun...@puck.nether.net
[mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Christopher E.
Brown
Sent: Tuesday, July 20, 2010 5:15 PM
To: juniper-...@punk.nether.net
Subject: [j-nsp] J series users bitten by the massive memory use increase
with flow mode add, please file jtac cases.



I know alot of us here have been bitten by this, and the fact that disabling
flow mode and
reverting to packet does not free up any of the ~ 460MB or so being eaten by
fwdd/flowd is
insane.


I am currently having the This is a design feature, the pre-alloc is
planned argument
with a SE.


I have no issue with flow features being added, looks great for branch
office use.


What is killing be is that flow is not wanted, needed or usable in a
small-infra use with
multipath and MPLS services, but even disabled flowd is eating half the box
memory.


52% memory usable at bootup (bare config) is not sane, and a 1GB 6350 used
to be able to
handle a few thousand igp routed plus a full table with easy and lots of
headroom, now it
is at 92%




I am pushing this w/ account team and support case, please do the same.  If
enough people
complain about the insane resource consumption they might actually fix it.


___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] J series users bitten by the massive memory use increase with flow mode add, please file jtac cases.

2010-07-20 Thread Sipes, Nathan
This is why I have 2 gb in 23xx and 4 gb in 4350s

android rocks

-Original Message-
From: Jay Hanke [jha...@myclearwave.net]
Received: 7/20/10 4:33 PM
To: 'Christopher E. Brown' [chris.br...@acsalaska.net]; 
juniper-...@punk.nether.net [juniper-...@punk.nether.net]
Subject: Re: [j-nsp] J series users bitten by the massive memory use increase 
with flow mode add, please file jtac cases.

Ditto, I was writing basically the same email when I saw your post come
through. I got a set of 2350's out of the box running 60% memory
utilization, I added a l3 vpn (with 3 routes) and the nice green bar in the
web interface changed colors on me.

Thanks,

Jay

-Original Message-
From: juniper-nsp-boun...@puck.nether.net
[mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Christopher E.
Brown
Sent: Tuesday, July 20, 2010 5:15 PM
To: juniper-...@punk.nether.net
Subject: [j-nsp] J series users bitten by the massive memory use increase
with flow mode add, please file jtac cases.



I know alot of us here have been bitten by this, and the fact that disabling
flow mode and
reverting to packet does not free up any of the ~ 460MB or so being eaten by
fwdd/flowd is
insane.


I am currently having the This is a design feature, the pre-alloc is
planned argument
with a SE.


I have no issue with flow features being added, looks great for branch
office use.


What is killing be is that flow is not wanted, needed or usable in a
small-infra use with
multipath and MPLS services, but even disabled flowd is eating half the box
memory.


52% memory usable at bootup (bare config) is not sane, and a 1GB 6350 used
to be able to
handle a few thousand igp routed plus a full table with easy and lots of
headroom, now it
is at 92%




I am pushing this w/ account team and support case, please do the same.  If
enough people
complain about the insane resource consumption they might actually fix it.


___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp