On (2014-01-19 09:52 -0800), joel jaeggli wrote: > It doesn't make a lot of sense to have device that has a nominal > capacity of several Tb/s attempt to punt packets up to a control-plane > processor that's gig-e connected.
You already punt IP options, vast majority of deployments won't see significant pps for IPV6 EH. As long as you police them to acceptable rate before punt and you don't share the policer with other punt masks, it is the right thing to do, blind dropping standard compliant packets not. -- ++ytti