Junos OS

 View Only
last person joined: 2 days ago 

Ask questions and share experiences about Junos OS.
  • 1.  ipsec high cpu

    Posted 19 days ago

    Good day,

    We use a off-site backup location with a ipsec tunnel.

    The max speed we get is 250mbps. for our purpose this is no issue.

    We get the bellow warnings indicating that the srx320 is running at max capacity.

    following the datasheet the device should get 336mbps over a ipsec connection. 

    The seccond warning can be expected. but the first one should not occur. 

    RTPERF_CPU_UTIL_MAX: FPC 0 PIC 0 CPU Utilization greater than 99, expect packet loss

    RTPERF_CPU_THRESHOLD_EXCEEDED: FPC 0 PIC 0 CPU utilization exceeds threshold, current value = 88

    Is there anything we can do to improve this?

    the ike proposal-set is standard.

    the ipsec is also as simple as possible.

    perfect-forward-secrecy {
        keys group1;
    }
    proposal-set standard;
    

    since it is happening during the night. there is no big issue. but simply wondering if there is something i can do to improve this.

    many thanks,

    Mark