Junos
Highlighted
Junos

Rate Limiting Register Messages on DR

[ Edited ]
‎11-30-2018 07:07 AM

 

Hi everyone,

 

In Cisco, we use "ip pim register-rate 10" to limit 10 REGISTER message  per ( S,G) in one sec,  Do we have equivalent command in Juniper to acheive the same goal?

 

Thanks and have a nice weekend!!

 

 

5 REPLIES 5
Highlighted
Junos

Re: Rate Limiting Register Messages on DR

‎11-30-2018 07:22 AM

We have couple similar options to do that:

 

 

re1# set protocols pim rp register-limit ?
Possible completions:
+ apply-groups         Groups from which to inherit configuration data
+ apply-groups-except  Don't inherit configuration data from these groups
> family               Protocol family
  log-interval         Time between successive log messages (1..65535)
  maximum              Maximum limit above which additional entries are not accepted (1..65535)
  threshold            Percentage of maximum at which to start generating warnings (1..100)

 

re1# set protocols pim sglimit ?  
Possible completions:
+ apply-groups         Groups from which to inherit configuration data
+ apply-groups-except  Don't inherit configuration data from these groups
> family               Protocol family
  log-interval         Time between successive log messages (1..65535)
  maximum              Maximum limit above which additional entries are not accepted (1..65535)
  threshold            Percentage of maximum at which to start generating warnings (1..100)
{master}[edit]

 

 

/Karan Dhanak
Highlighted
Junos

Re: Rate Limiting Register Messages on DR

‎11-30-2018 07:32 AM
Highlighted
Junos

Re: Rate Limiting Register Messages on DR

‎11-30-2018 09:45 AM

Thanks for your response,

 

re1# set protocols pim rp register-limit ?
Possible completions:
+ apply-groups         Groups from which to inherit configuration data
+ apply-groups-except  Don't inherit configuration data from these groups
> family               Protocol family
  log-interval         Time between successive log messages (1..65535)
  maximum              Maximum limit above which additional entries are not accepted (1..65535)
  threshold            Percentage of maximum at which to start generating warnings (1..100)

 

 

Above " maximum"  refers to over all limit on REGISTER message or does it refer to Limit for each ( S,G)  just like we see in Cisco?

Example:

set protocols pim rp register-limit 10

 

Are we saying please limit 10 Register message per second for each (S,G) or are we saying limit 10 REGISTER per seconds total for all (S,G)?

 

 

 

 

 

 

Highlighted
Junos
Solution
Accepted by topic author sarahr202
‎11-30-2018 10:11 PM

Re: Rate Limiting Register Messages on DR

‎11-30-2018 08:56 PM

@sarahr202 wrote:

Thanks for your response,

 

re1# set protocols pim rp register-limit ?
Possible completions:
+ apply-groups         Groups from which to inherit configuration data
+ apply-groups-except  Don't inherit configuration data from these groups
> family               Protocol family
  log-interval         Time between successive log messages (1..65535)
  maximum              Maximum limit above which additional entries are not accepted (1..65535)
  threshold            Percentage of maximum at which to start generating warnings (1..100)

 

Above " maximum"  refers to over all limit on REGISTER message or does it refer to Limit for each ( S,G)  just like we see in Cisco?

Example:

set protocols pim rp register-limit 10

 

Are we saying please limit 10 Register message per second for each (S,G) or are we saying limit 10 REGISTER per seconds total for all (S,G)?

 


  • Each unique (S,G) join received by the RP counts as one group toward the configured register messages limit.

  • Periodic register messages sent by the DR for existing or already known (S,G) entries do not count toward the configured register messages limit.

  • Register messages are accepted until either the PIM register limit or the PIM join limit (if configured) is exceeded. Once either limit is reached, any new requests are dropped.



I don't think we have per second model for limiting register like Cisco. I checked Cisco's doc on "ip pim register-rate-limit 10" which basically sets a limit of 10 PIM sparse mode register messages SENT (outgoing) per second for each (S, G).

 

Whereas in Juniper, we rate limit on INCOMING register message (assuming Juniper node is RP and Cisco's DR)

 

 

 

But you can filter PIM register messages sent from the  DR or to the RP using firewall filters, A high degree of control over PIM register messages is provided by RP and DR register message filtering. Message filtering also prevents unauthorized groups and sources from registering with an RP router. More Info here:

 

Configuring Register Message Filters on a PIM RP and DR examples:

 

 

/Karan Dhanak
Highlighted
Junos

Re: Rate Limiting Register Messages on DR

‎11-30-2018 11:02 PM

Thanks, 

Our goal is to rate limit  out going Register message  for ( S,G)  , filtering will  block all outgoing  register message. 

Looks like I am out of luck here.

 

Thanks for your help

 

 

Feedback