Re: [j-nsp] Outgrowing a QFX5100

2022-09-16 Thread Saku Ytti via juniper-nsp
On Fri, 16 Sept 2022 at 22:12, Jason Healy via juniper-nsp wrote: Hey Jason, > My question is, what would be the logical "step up" from the qfx on a small > network? I'm thinking the MX240 as it's the smallest router that has > redundant REs. However, I have no experience with the router

[j-nsp] Flowspec not filtering traffic.

2022-09-16 Thread Gustavo Santos via juniper-nsp
Hi, We have noticed that flowspec is not working or filtering as expected. Trying a DDoS detection and rule generator tool, and we noticed that the flowspec rule is installed, the filter counter is increasing , but no filtering at all. For example DDoS traffic from source port UDP port 123 is

[j-nsp] Outgrowing a QFX5100

2022-09-16 Thread Jason Healy via juniper-nsp
Looking for a little wisdom from the list. We're a small school campus that's been running a QFX 5100 as our core switch/router for several years. It's been a good piece of equipment but we continue to hit weird limitations and I'm wondering if we're pushing the platform too hard. My