Setting the Rate at Which Packets Are Sent to Create a Flow for a User
A device can be configured to dynamically detect the traffic forwarding rate and limit the rate at which packets are sent to create a flow for each user.
Context
A NAT device with a multi-core structure allows flow construction and forwarding processes to share CPU resources. To minimize or prevent NAT packet loss and a CPU usage increase, the device has to maintain a proper ratio of the forwarding rate to the flow creation rate.
Procedure
- Run system-view
The system view is displayed.
- Run nat instance instance-name [ id id ]
The NAT instance view is displayed.
- (Optional) Run nat user-session create-rate limit enable
The limit on the rate at which packets are sent to create a user flow is set.
- Perform either of the following operations:
- If the rate accuracy is low, run the nat user-session create-rate rate command.
- If the rate accuracy is high, run the nat user-session create-rate extended-range rate command.
If both the nat user-session create-rate extended-range and nat user-session create-rate commands are run, the latest configuration takes effect.
- Run commit
The configuration is committed.