<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72" style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal>I currently have about ~2750 public IP’s (11 /24’s) for ~53,000 broadband customers. (ftth, cable modem and dsl)<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I cap them at 3,000 ports using PBA, port block allocation…. Blocks of 100 at a time, and 30 blocks per subscriber. (100*30=3000)<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I usually see, when a private internal IP is using up the full 3,000 ports, when we look closer at the sessions, they usually look suspect, as if the end host is infected or has malware causing lots of connections<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I run all this though, (6) MX960’s with (1) MS-MPC-128G in each chassis, and (2) MX104’s with (1) MS-MIC-16G per 104. The utilization as far as I’ve seen, regarding memory and load on the service modules seems fine at the levels we are at.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Hope that helps.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>-Aaron<o:p></o:p></p></div></body></html>