Re: [j-nsp] Outgrowing a QFX5100

Hi Jason, Do you have any more details about what limitations you are encountering on the QFX? Is it hardware related or software? You can use the feature explorer to see what is supported:

Re: [j-nsp] Flowspec not filtering traffic.

I can't blame the port=0, even though I agree with the explanation that you shouldn't rely on it for identifying fragmentation. Looking at the program, whenever the counter you mentioned (1x8.2x8.84.34,*,proto=17,port=0) is punched, it is also discarded. And you can observe the counter being