Re: [j-nsp] Marking/shaping UDP reflection traffic

2022-03-09 Thread Saku Ytti via juniper-nsp
On Wed, 9 Mar 2022 at 19:48, Gert Doering via juniper-nsp wrote: > We use different classes for UDP/123, UDP/53 (exclude well-known > recursives), fragments, ... and are currently using between 20 and 100 > mbit/s for these classes. What is the right number for you depends > on "how much can

Re: [j-nsp] Marking/shaping UDP reflection traffic

2022-03-09 Thread Gert Doering via juniper-nsp
Hi, On Wed, Mar 09, 2022 at 05:10:25PM +, Dario Amaya via juniper-nsp wrote: > I am looking to implement shaping/rate limiting of common DDOS > reflection / amplification UDP traffic on our backbone ports. > > if we have a 10G backbone link how would I go about rate-limiting say > udp/123 to

[j-nsp] Marking/shaping UDP reflection traffic

2022-03-09 Thread Dario Amaya via juniper-nsp
Hello, I am looking to implement shaping/rate limiting of common DDOS reflection / amplification UDP traffic on our backbone ports. if we have a 10G backbone link how would I go about rate-limiting say udp/123 to maximum 5Gbps? Is anybody doing this already?