[AusNOG] mx80 flow-spec

[Luke Iggleden]

Hi Noggers,

We're looking to implement flow-spec filters on our mx80 borders, 
however we've come across a post from 2011 suggesting that with as few 
as 15 flow-spec filters live, the PFE on the mx80 drops to 3-5Mpps. This 
is of course not something we could afford.

I haven't been able to find any recent posts online as to whether or not 
this is an issue with code from back in 2011 (possibly) or if it is a 
trio chipset (pfe?) limitation?

I would have thought that basic acls' on a hardware router like the mx, 
wouldn't affect packet performance as bad as this? I wouldn't expect a 
flow-spec filter to be any different at the pfe level than a 
filter-statement generated from the CLI?

I'd really appreciate any pointers to sites with people discussing 
flow-spec, mx series, exabgp, nfsen and anything else that we should be 
looking at. If it comes down to it, I guess we'll just end up with a 
S/RTBH setup.

Original Post
http://mailman.nanog.org/pipermail/nanog/2011-January/030051.html



Cheers,

Luke Iggleden
http://sishosting.com.au