For a single-rate two-color policer, configure the burst size as a number of bytes. The burst size allows for short periods of traffic bursting (back-to-back traffic at average rates that exceed the configured bandwidth limit). Single-rate two-color policing uses the single token bucket algorithm to measure traffic-flow conformance to a two-color policer rate limit.
CLI Statement. EX Series. Specify the maximum allowed burst size to control the amount of traffic bursting.
This means that configuring a large burst size can allow too many packets to avoid rate limiting, which can lead to a traffic rate that exceeds the bandwidth limit for an extended period of time. If the average rate is considered within 1 second, the rate is still below the configured bandwidth limit.
Configure rate limits for a single-rate two-color policer.
12/13/2009 · 3- In Juniper document i read it was saying the minimum burst-size-limit should be the 10 times MTU and recommended value is calculated from the below formula: burst = (rate [bps]) * 0.005 [sec/interval]) and result of this should be divided by 8 to convert answer in to bytes.
How To: Simple Juniper SRX Rate-Limiting via Policer …
How to calculate burst-size-limit when configuring policer …
How To: Simple Juniper SRX Rate-Limiting via Policer …
8/19/2009 · if-exceeding { bandwidth-limit 100k burst- size-limit 100 } then discard} family inet { filter icmp_protect { term test { from { destination-address { 10.102.0.1/32 } protocol icmp } then { policer icmp count icmp_packet } } term default { then accept, 6/2/2016 · Step by step example configuration to police BUM traffic: Define individual policers for each type of BUM traffic: Broadcast. set firewall policer vlan108_broadcast if-exceeding bandwidth-limit 1m. set firewall policer vlan108_broadcast if-exceeding burst-size-limit 50k. set firewall policer vlan108_broadcast then discard.
4/11/2014 · The policer # must be called elsewhere in the policy to be effective. # set firewall policer GLOBAL-POLICER if-exceeding bandwidth-limit 80m set firewall policer GLOBAL-POLICER if-exceeding burst- size-limit 625k set firewall policer GLOBAL-POLICER then discard # # Create the outbound filter.
