[84624] in North American Network Operators' Group
PBR needing to hit the cpu?
daemon@ATHENA.MIT.EDU (David Hubbard)
Sat Sep 17 23:58:14 2005
Date: Sat, 17 Sep 2005 23:57:47 -0400
From: "David Hubbard" <dhubbard@dino.hostasaurus.com>
To: <nanog@merit.edu>
Errors-To: owner-nanog@merit.edu
Just curious, do most vendors' hardware need to hit the
cpu when doing policy-based routing? I found one of my
border routers' cpu's on the bad end of a DDoS but once
I turned off a not necessarily required setup to force
some outbound traffic to take a specific outbound link
via PBR, the DDoS traffic was no longer an issue. It was
only about 200 Mbit so I hadn't expected it to be an issue
but apparently it was; I was surprised when support told
me the PBR was making traffic hit the cpu. =20
TIA,=20
David
