Routing

Hello,

I have configured for dnat. When i am sending the traffic in half-duplex i am getting the throughput of approx 90% for 10g traffic

But in duplex mode , I am getting teh throughput of 40% (i.e. 4gbps in output ) in 10g .

Why is it ?

Can any one please explain for this reason?

Thanks

Hello there,

Is it inline NAT? Or are You using MS-DPC? Or - are You using MS-MIC? Or - are You using MS-MPC?

These simple guidelines may help You to get more responses

https://forums.juniper.net/t5/Routing/Please-include-configurations-and-topologies-when-you-re-having/td-p/81312

HTH

Thx

Alex

i am using ms-dpc interface (i.e service interface ) . 

On service interface i am gettign 10gbps traffic on input as well as output.

But on LAN side, I am getting output as 4 gbps.

Hello there,

---

@tridandi wrote:

 

 

On service interface i am gettign 10gbps traffic on input as well as output.

 

But on LAN side, I am getting output as 4 gbps.

---

Simultaneously? Or are these different tests? What is the JUNOS version?

What traffic generator do You use? iPerf? IXIA? Spirent?

Is it stateful TCP? Or is it UDP? Unidirectional or bidirectional?

What is MTU on both sides of the DUT? Do You observe fragmentation? 

Please provide as much information as possible and do not forget the configs & topology diagram.

HTH

Thx

Alex

Dear aarsenjev,

Thanks for your reply,

When i am sending the traffic from one end then i am getting the throughput of 100 % on the other side as output.

But when i am sending the traffic from both end simultaneously then the throughput reduce to 4gbps.

Traffic Generator : Analyzer 

UDP PACKET , BIDIRECTIONAL

MTU :1300

 Configuration are working fine both side we are  flow of packet are OK. But getting problem in throughput

Configuration :-

Configuration On R1

• set interfaces xe-9/1/3 unit 0 description "LAN FOR NAT of interface xe-9/1/2"
• set interfaces ge-9/1/3 unit 0 family inet address 198.168.91.1/24
• set interfaces ge-9/1/2 description "10g WAN for 10g LAN xe-9/1/3 R1"
• set interfaces ge-9/1/2 unit 0 family inet service input service-set svc-set1
• set interfaces ge-9/1/2 unit 0 family inet service output service-set svc-set1
• set interfaces ge-9/1/2 unit 0 family inet address 10.20.41.1/24
• set interfaces sp-8/0/0 unit 0 family inet
• set services nat pool pool1 address 198.168.91.100/32
• set services nat rule nat-rule1 match-direction input
• set services nat rule nat-rule1 term 1 from destination-address 10.20.41.1/32
• set services nat rule nat-rule1 term 1 from destination-port range low 800
• set services nat rule nat-rule1 term 1 from destination-port range high 5000
• set services nat rule nat-rule1 term 1 then port-forwarding-mappings map1
• set services nat rule nat-rule1 term 1 then translated destination-pool pool1
• set services nat rule nat-rule1 term 1 then translated translation-type dnat-44
• set services nat rule nat-rule1 term 2 then no-translation
• set services nat port-forwarding map1 destined-port 900 translated-port 6000
• set services nat port-forwarding map1 destined-port 1000 translated-port 6500
• set services service-set svc-set1 nat-rules nat-rule1
• set services service-set svc-set1 interface-service service-interface sp-8/0/0
• set routing-options static route 198.168.81.0/24 next-hop 10.20.41.2
• set routing-options static route 172.16.2.0/24 next-hop 10.20.41.2

Configuration On R2

• set interfaces xe-9/1/2 description "1g wan for 1g LAN ge-0/2/8 R2"
• set interfaces xe-9/1/2 unit 0 family inet service input service-set svc-set2
• set interfaces xe-9/1/2 unit 0 family inet service output service-set svc-set2
• set interfaces xe-9/1/2 unit 0 family inet address 10.20.41.2/24
• set interfaces xe-9/1/3 unit 0 description " LAN FOR NAT OF INTERFACE ge-0/2/9"
• set interfaces xe-9/1/3 unit 0 family inet address 198.168.81.1/24
• set interfaces sp-8/0/0 unit 0 family inet
• set services nat pool pool1 address 198.168.81.100/32
• set services nat rule nat-rule2 match-direction input
• set services nat rule nat-rule2 term 1 from destination-address 10.20.41.2/32
• set services nat rule nat-rule2 term 1 from destination-port range low 500
• set services nat rule nat-rule2 term 1 from destination-port range high 5000
• set services nat rule nat-rule2 term 1 then port-forwarding-mappings map1
• set services nat rule nat-rule2 term 1 then translated destination-pool pool1
• set services nat rule nat-rule2 term 1 then translated translation-type dnat-44
• set services nat rule nat-rule2 term 2 then no-translation
• set services nat port-forwarding map1 destined-port 1000 translated-port 7000
• set services nat port-forwarding map1 destined-port 2000 translated-port 6500
• set services service-set svc-set2 nat-rules nat-rule2
• set services service-set svc-set2 interface-service service-interface sp-8/0/0
• set routing-options static route 198.168.91.0/24 next-hop 10.20.41.1
• set routing-options static route 172.16.1.0/24 next-hop 10.20.41.1

Hello there,

Thanks for posting the configs, topology and printouts.

From what I see You are having a cosmetic/display issue here.

First things first - MS-DPC NPU t'put is around 10Gbps where 10Gbps is a sum of inside->outside (or PRIVATE->PUBLIC) and outside->inside (or PUBLIC->PRIVATE) bps. 

I will explain this further.

"monitor interface sp-8/0/0" printouts shows You the sum of:

- client->server (c2s) traffic ENTERING sp-8/0/0 private side + server->client (s2c) traffic ENTERING sp-8/0/0 public side, roughly 10Gbps on L3.

- client->server (c2s) traffic LEAVING sp-8/0/0 public side + server->client (s2c) traffic LEAVING sp-8/0/0 private side, roughly 10Gbps on L3.

So far so good.

The "monitor interface xe-9/1/3" printouts shows You :

- c2s traffic in one direction

- s2c traffic in other direction, and

- bps at L2, not L3 as SP interface shows.

Now, let's see how much traffic You are offering to NPU.

Xe-9/1/3 input is 9Gbs.

xe-9/1/2 input is 6Gbps.

Summing it up, You are offering 15Gbps of traffic at L2 to NPU while it is able to process only 10Gbps at L3.

Your average packet size is ~1282 Bytes from sp-8/0/0 stats, therefore 15Gbps of L2 translates to 15 * (1282/1296) = 14.8Gbps of L3. Still above 10Gbps, and I reckon You are losing ~4.8Gbps inside NPU.

I hope this makes sense. 

Please post "show services service-set sttatistics packet-drops" printout to see the reason. I reckon Your NPU CPU is at nearly 100%.

HTH

Thx

Alex