How to dynamically adjust the CPCAR rate on an AR router

In case of a system attack, the CPCAR rate static adjustment function cannot control the rate of delivering packets to the CPU in a timely manner. As a result, the CPU is overloaded, severely affecting the running state of the CPU.
The CPCAR rate dynamic adjustment function can periodically detect the CPU usage. When detecting that the current CPU usage of the system exceeds a set threshold, the function dynamically adjusts the CPCAR within a normal range to reduce the impact of the attack on the CPU.
The configuration procedure is as follows:
1. Run the system-view command to access the system view.
2. Run the cpu-defend policy policy-name command to access the anti-attack policy view.
3. Run the rate-adaption enable command to enable the CPCAR rate dynamic adjustment function.
By default, the CPCAR rate dynamic adjustment function is not enabled.
4. Run the rate-adaption adjust-period period-value command to configure an interval of periodically detecting the CPU usage.
By default, the periodical detection interval is 30s.
5. Run the rate-adaption cpu-usage threshold low low-value high high-value command to configure a CPU load threshold for triggering the CPCAR rate dynamic adjustment function.
By default, the minimum CPU load threshold for triggering CPCAR rate dynamic adjustment is 65%, and the maximum threshold is 85%.
6. Run the rate-adaption adjust-step step-value command to configure an adjustment amplitude of the CPCAR rate.
By default, the adjustment amplitude of the CPCAR rate is 20%.
7. (Optional) Run the rate-adaption exception packet-type packet-type command to configure types of protocols to which the CPCAR rate dynamic adjustment function does not apply.
By default, the CPCAR rate dynamic adjustment function applies to all types of protocols.

Scroll to top