Juniper E320 User Manual

Two-Rate Rate-Limits ! 91
Chapter 3: Creating Rate-Limit Profiles
! t = time
! T(t) = number of tokens in token bucket at time t
Two-Rate Rate-Limits
The two-rate rate limiter enables you to build tiered rate-limit services and to
specify different treatments for packets at different rates.
Token buckets control how many packets per second are accepted at each of the
configured rates and provide flexibility in dealing with the bursty nature of data
traffic. At the beginning of each sample period, the two buckets are filled with
tokens based on the configured burst sizes and rates. Traffic is metered to measure
its volume. When traffic is received, if tokens remain in both buckets, one token is
removed from each bucket for every byte of data processed. As long as tokens are
still in the committed burst bucket, the traffic is treated as committed.
When the committed burst token bucket is empty but tokens remain in the peak
burst bucket, traffic is treated as conformed. When the peak burst token bucket is
empty, traffic is treated as exceeded.
Table 9: TCP-friendly One-Rate Rate-Limit Profile Algorithms
Step Result
if not color aware, use green as the
incoming packet color, otherwise use the
actual packet color
if incoming packet color is green
if T(t) > = B
! Packet is colored green
! T(t) is decremented by B
if T(t) < B and CD is incremented by
B – T(t)
if CD < Extended Burst and T(t) < B
! Packet is colored yellow
! T(t) is decremented by B (allow T(t) < 0, if
necessary)
if CD > = Extended Burst B and T(t) < B
! Packet is colored red
! CD is reset to 0
if incoming packet color is yellow (only
occurs in color-aware operation)
if T(t) < B and CD is incremented
by B– T(t)
if CD < Extended Burst
! Packet is colored yellow
! T(t) is decremented by B (allow T(t) < 0, if
necessary)
if CD >= Extended Burst
! Packet is colored red
! CD is reset to 0
if incoming packet color is red (only
occurs in color-aware operation)
! Packet is colored red

Juniper E320 Specifications

General

Rack Units	1U
Operating System	JUNOS
Product Type	Router
Routing Protocols	BGP, OSPF, IS-IS, RIP
Memory	4 GB
Redundancy	Power supply
Power Supply	AC

Summary

Chapter 2 Creating Policies

Creating Classifier Control Lists

Explains how to create Classifier Control Lists (CLACLs) to define packet flows.

Creating Policy Lists

Details the process of creating policy lists, which contain rules for policy actions.

Creating Classifier Groups and Policy Rules

Describes how to create classifier groups and policy rules within a policy list.

Merging Policies

Applying Policy Lists to Interfaces and Profiles

Details how to assign policy lists to interfaces and profiles for traffic management.

Chapter 3 Creating Rate-Limit Profiles

Rate Limits

Hierarchical Rate Limits

One-Rate Rate-Limit Profiles

Details how to create and configure one-rate rate-limit profiles for TCP applications.

Two-Rate Rate-Limits

Explains how to create two-rate rate-limit profiles for tiered rate-limit services.

Chapter 4 Policy Resources

FPGA Hardware Classifiers

Describes FPGA hardware classifiers used for packet classification with hardware assist.

CAM Hardware Classifiers

Software Classifiers

Chapter 5 Monitoring Policy Management

Overview

Setting a Statistics Baseline

Policy Management show Commands

Lists and describes the show commands used to display policy statistics and configurations.

Packet Flow Monitoring

Explains how to use the policy log rule to capture and monitor packet flows.

Chapter 6 Packet Mirroring

Overview

Introduces packet mirroring for traffic analysis, debugging, and troubleshooting.

Configuring CLI-Based Packet Mirroring

Explains how to use CLI commands to configure and manage packet mirroring.

Configuring RADIUS-Based Mirroring

Details how to configure RADIUS-based mirroring for specific users and sessions.

Conflicts Between CLI-Based and RADIUS-Based Configurations

Resolving and Tracking the Analyzer Device’s Address

Optimizing Packet Mirroring Performance

Logging Packet Mirroring Information

Monitoring Packet Mirroring