Re: [j-nsp] traffic drops to 8 Gb/s when a firewall filter is applied

2012-05-30 Thread Matjaž Straus Istenič
Hi list, no, this is not a joke ;-) -- our problem disappeared when FPC was _power-cycled_ after almost a year uptime. JTAC and the local Juniper partner were very helpful in the troubleshooting and they even supplied a new FPC for a test. We replicated the same behaviour on two MXs. We still

Re: [j-nsp] traffic drops to 8 Gb/s when a firewall filter is applied

2012-05-30 Thread Keegan Holley
What version of JunOS were you running? Any interesting logs/stats from the DPC itself? 2012/5/30 Matjaž Straus Istenič juni...@arnes.si Hi list, no, this is not a joke ;-) -- our problem disappeared when FPC was _power-cycled_ after almost a year uptime. JTAC and the local Juniper

Re: [j-nsp] traffic drops to 8 Gb/s when a firewall filter is applied

2012-05-30 Thread Matjaž Straus Istenič
On 30. maj 2012, at 21:55, Keegan Holley wrote: What version of JunOS were you running? Any interesting logs/stats from the DPC itself? While DPC (or FPC in old terms) was online, a few upgrades were done, starting with 9.6.?. During those the card was non-stop online. We currently stick at

Re: [j-nsp] traffic drops to 8 Gb/s when a firewall filter is applied

2011-12-14 Thread Richard A Steenbergen
On Fri, Dec 09, 2011 at 01:19:54PM -0500, Keegan Holley wrote: Yea but it should have enough silicon to do simple policing in hardware unless you have every single other feature on the box enabled. If a policer with no queueing, and no marking etc, caused throughput to decrease by 20%

Re: [j-nsp] traffic drops to 8 Gb/s when a firewall filter is applied

2011-12-14 Thread Keegan Holley
I 2011/12/14 Richard A Steenbergen r...@e-gerbil.net On Fri, Dec 09, 2011 at 01:19:54PM -0500, Keegan Holley wrote: Yea but it should have enough silicon to do simple policing in hardware unless you have every single other feature on the box enabled. If a policer with no queueing, and no

[j-nsp] traffic drops to 8 Gb/s when a firewall filter is applied

2011-12-09 Thread Matjaž Straus Istenič
Hi list, we've tested the throughput of a 10G interface on a DPCE 4x10GE R running in MX960. We've loaded the interface with almost 10 Gb/s of traffic in both directions and it work fine with no loss until an output filter was activated on the interface. Then the traffic dropped to 8 Gb/s

Re: [j-nsp] traffic drops to 8 Gb/s when a firewall filter is applied

2011-12-09 Thread Gabriel Blanchard
We have simple filters configured on our 10Gbps as well on our DPCs and can definitely push more than 8gbps. Though mostly in one direction. Are you saying it's limited to 8gbps in both directions? I'm curious to know which Junos version you are running. Gabriel Blanchard Director,

Re: [j-nsp] traffic drops to 8 Gb/s when a firewall filter is applied

2011-12-09 Thread Keegan Holley
Can you post the filter and a sh int extensive? You might have the burst rate too small. What kind of load are you generation? Do you see the ff counters incrementing? 2011/12/9 Gabriel Blanchard g...@teksavvy.ca We have simple filters configured on our 10Gbps as well on our DPCs and can

Re: [j-nsp] traffic drops to 8 Gb/s when a firewall filter is applied

2011-12-09 Thread Chris Morrow
On 12/09/2011 12:58 PM, Keegan Holley wrote: Can you post the filter and a sh int extensive? You might have the burst rate too small. What kind of load are you generation? Do you see the ff counters incrementing? firewall filters cause extra lookups... so it's reasonable that even a:

Re: [j-nsp] traffic drops to 8 Gb/s when a firewall filter is applied

2011-12-09 Thread Matjaž Straus Istenič
Hi Gabriel and thank you for the reply, On 9. dec. 2011, at 18:52, Gabriel Blanchard wrote: We have simple filters configured on our 10Gbps as well on our DPCs and can definitely push more than 8gbps. Though mostly in one direction. Are you saying it's limited to 8gbps in both directions?