PBR cpu impact

Unanswered Question
Jul 9th, 2007


I need to enable PBR on my main internet gateway. I have between 300-500 Mbps of traffic on a NPE-G1 and my cpu is at 20%. I need to send some trafic another way to test a new firewall. Will this hardware support it?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
a.shaik Mon, 07/09/2007 - 04:27

NPE-G1 is designed for 1,018,000pps and for 521.22Mbps in CEF switching.These performances are given to 64byte packet size, so really in worst case. Could you please tell me what amount of traffic you want to add via PBR.

In normal design, it's preferable to get CPU under 50%



dominic.caron Mon, 07/09/2007 - 05:35

I now have around 90K (45K each direction) of PPS.

I have a pair of G1 on both side of my old (and new) firewall. I need to test the incoming policy of my new firewall. The goal is to have 1 or two host on the internet using the new firewall while the rest of the trafic is going tru my old one.

Richard Burts Mon, 07/09/2007 - 07:01


I do not believe that PBR to redirect a couple of hosts will put much burden on your G1 processors. I believe that you are safe to go ahead and configure this.



Amit Singh Mon, 07/09/2007 - 07:15

Agree with Rick on this, you should be fine to go with PBR.

-amit singh


This Discussion