nanog mailing list archives
Re: PBR needing to hit the cpu?
From: Richard A Steenbergen <ras () e-gerbil net>
Date: Sun, 18 Sep 2005 03:39:36 -0400
On Sat, Sep 17, 2005 at 11:57:47PM -0400, David Hubbard wrote:
Just curious, do most vendors' hardware need to hit the cpu when doing policy-based routing? I found one of my border routers' cpu's on the bad end of a DDoS but once I turned off a not necessarily required setup to force some outbound traffic to take a specific outbound link via PBR, the DDoS traffic was no longer an issue. It was only about 200 Mbit so I hadn't expected it to be an issue but apparently it was; I was surprised when support told me the PBR was making traffic hit the cpu.
Some do. Some don't. That is about the best answer you're going to get unless you can tell us what hardware. Obviously policy-based routing uses a different lookup mechanism (some user-defined policy) than traditional destination ip longest prefix match. A cpu-based router is going to do it in cpu (duh), but the lookup process isn't going to be as efficient. A lower end hardware based/assisted router or L3 switch may just end up kicking policy routed traffic down a slow path, which may or may not be CPU based. Many higher end routers are perfectly capable of doing policy routing at the same level of performance as regular IP routing. Most vendors make a product that fits into each category. -- Richard A Steenbergen <ras () e-gerbil net> http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)
Current thread:
- PBR needing to hit the cpu? David Hubbard (Sep 17)
- Re: PBR needing to hit the cpu? Tony Li (Sep 17)
- Re: PBR needing to hit the cpu? rafi-nanog (Sep 18)
- Re: PBR needing to hit the cpu? Tony Li (Sep 18)
- Re: PBR needing to hit the cpu? rafi-nanog (Sep 18)
- Re: PBR needing to hit the cpu? Richard A Steenbergen (Sep 18)
- Re: PBR needing to hit the cpu? Sean Figgins (Sep 18)
- Re: PBR needing to hit the cpu? Adam Rothschild (Sep 18)
- Time Warner Outage? Brian Boles (Sep 18)
- Re: Time Warner Outage? Justin (Sep 18)
- Re: PBR needing to hit the cpu? Adam Rothschild (Sep 18)
- Re: PBR needing to hit the cpu? Lincoln Dale (Sep 18)
- Re: PBR needing to hit the cpu? Tony Li (Sep 17)
- <Possible follow-ups>
- Re: PBR needing to hit the cpu? Fergie (Paul Ferguson) (Sep 18)