PBR needing to hit the cpu?
David Hubbard
dhubbard at dino.hostasaurus.com
Sun Sep 18 03:57:47 UTC 2005
Just curious, do most vendors' hardware need to hit the
cpu when doing policy-based routing? I found one of my
border routers' cpu's on the bad end of a DDoS but once
I turned off a not necessarily required setup to force
some outbound traffic to take a specific outbound link
via PBR, the DDoS traffic was no longer an issue. It was
only about 200 Mbit so I hadn't expected it to be an issue
but apparently it was; I was surprised when support told
me the PBR was making traffic hit the cpu.
TIA,
David
More information about the NANOG
mailing list