Hi, On Wed, Sep 02, 2009 at 07:39:34AM -0500, Justin Shore wrote: > You eluded to one of my strongest selling points on DFCs though I don't > think you made that particular connection yet. DFCs offload QoS to the > LC as you said. That also means that CoPP is also handled in hardware > if you have DFCs in place since it requires MLS QoS on that platform. > Ie, if your 6500/7600 is going to be publicly-accessible on the Internet > in any capacity and you want it to be able to use CoPP to withstand a > targeted DoS attack then DFCs are not optional, they're critical.
Why? Wouldn't the Sup PFC handle "CoPP-in-hardware" if you have no DFCs?
(Assuming that the total incoming packet volume is still inside the
bounds that the PFC can handle)
gert
--
USENET is *not* the non-clickable part of WWW!
//www.muc.de/~gert/
Gert Doering - Munich, Germany [email protected]
fax: +49-89-35655025 [email protected]
pgpjz6TOSr74E.pgp
Description: PGP signature
_______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
