Re: [j-nsp] How many bits/bytes of a packet can be matched in a firewall rule on Juniper MX-series?

2021-07-08 Thread Saku Ytti via juniper-nsp
Hey, I'm not sure I can parse what you are asking. I thought you're asking how far in the packet you can match with flexible-match-mask, which I can commit up-to 255 byte offset, but didn't test. I know the original Trio gets about 320B of the packet in the LU, but newer Trio's get a little bit

[j-nsp] How many bits/bytes of a packet can be matched in a firewall rule on Juniper MX-series?

2021-07-08 Thread embolist via juniper-nsp
--- Begin Message --- I'm trying to figure out how many bits/bytes of a packet I can match on in a firewall rule for a Juniper MX router. A lot of the documentation talks about a 128-bit match criteria, but then I see some examples which seem to imply that I can do multi-term matching, chaining