Got it

Traffic Policing Issue

Created: Jun 4, 2020 10:15:37Latest reply: Jul 8, 2020 23:24:44 288 22 0 0
  Rewarded HiCoins: 0 (problem resolved)

Hello everyone,


I got one issue when I test traffic policing on Huawei S12704.

My scenario: (check Policing Issue attachment).

- PC1 sends out traffic at a high rate (1Gbps). (using iperf tool)

- SW1 & SW2 applies traffic policing at 15Mbps on the link between SW1 & SW2 (Outbound direction).


My issue:

In the beginning, when PC1 starts to send traffic to PC2, SW1 will receive traffic with full bandwidth and it applies traffic policing (limit traffic at 15Mbps) on an outgoing interface (XG2/2/0/32). But the peak rate on the outgoing interface is higher than 15Mbps. (Check Output_Peak_Rate attachment)



Configuration on SW1:

traffic policy BES2_LIMIT match-order config
 classifier TEST_C behavior CAR_15M
traffic classifier TEST_C operator or precedence 30
 if-match acl 3051
traffic behavior CAR_15M
 permit
 car cir 15360 pir 15360 cbs 2887680 pbs 2887680 mode color-blind green pass yellow pass red discard
 statistic enable
acl number 3051
 rule 5 permit ip source 10.92.92.0 0.0.0.255 dscp ef


Can anyone help or explain my issue?

Many thanks,

Attachment: You need to log in to download or view. No account? Register
  • x
  • convention:

Featured Answers
Admin Created Jun 11, 2020 03:08:24 Helpful(1) Helpful(1)

Posted by Harry101 at 2020-06-10 07:56 Hello @chenhui  Thank you for your explanation. So to get the correct peak rate at the first second ...
Hi,
As the documentation describes below:

In Color-Blind mode, the following rules apply when a packet of size B arrives at time t:
If Tp(t) – B < 0, the packet is marked red, and The Tc and Tp values remain unchanged.
If Tp(t) – B ≥ 0 but Tc(t) – B < 0, the packet is marked yellow, and Tp is decremented by B.
If Tc(t) – B ≥ 0, the packet is marked green and both Tp and Tc are decremented by B.

When the bucket P is used up, then if configure the yellow marking traffic pass, more traffic will passing through than configuring the yellow marking traffic discard. The result is a higher peak rate in the motoring result.
View more
  • x
  • convention:

Harry101 Created Jun 11, 2020 04:46:59
Hi chenhui,
I want to use single-rate single-bucket, how can I configure this? (reject PIR + PBS)  
All Answers
jason_hu Admin Created Jun 4, 2020 10:25:58 Helpful(0) Helpful(0)

please wait for.
View more
  • x
  • convention:

chenhui Admin Created Jun 4, 2020 12:39:45 Helpful(0) Helpful(0)

Hi @Harry101,

It's normal. 

According to your configuration the CBS & PBS are 2887680 bytes, which equals to 2.8M, at the very begining, the result displayed on the NMS is effected by the monitoring interval.


View more
  • x
  • convention:

Harry101 Created Jun 4, 2020 13:11:45
Hi @chenhui,
I still don't understand:
- CBS & PBS indicates the capacity of bucket C & P, that is, the maximum volume of burst traffic that bucket C allows, they are not the sending or receiving rate.
- Why are the peak rate of pic1 and pic3 different?  
chenhui Admin Created Jun 5, 2020 06:08:34 Helpful(0) Helpful(0)

Hi Harry,
The PIR & CIR indicates the rate which adding tokens into the bucket C and P. PIR and CIR decide the rate when the bucket is empty. Assuming that the bucket is empty, since the total number of tokens in this unit time is PIR * unit time, the total amount of traffic passing through will less than PIR * unit time.
If the bucket is full, the total traffic passing through in a short time will be PBS, which is obviously much more than PIR * unit time, which results in a much higher rate than PIR
View more
  • x
  • convention:

Harry101 Created Jun 5, 2020 09:36:40
Hi @chenhui
How about the difference between the peak rate of pic1 & pic3. I tried to test many times and I got the same result (pic1 & pic3).
And I also do another test with new behavior
car cir 15360 pir 15360 cbs 2887680 pbs 2887680 mode color-blind green pass yellow discard red discard (yellow discard)
--> the output peak rate reduced from 52M to 31M --> ???

Do you have any recommendation to solve this issue?
Thank for your help.  
chenhui Reply Harry101  Created Jun 5, 2020 11:07:11
Well, I don't have any clustion either right now. I'll test this later and try to find out a explanation.  
Sapte Reply chenhui  Created Jun 5, 2020 15:37:31
@Harry101 @chenhui it's easy to understand,check my analyze in the below  
Sergio93 Created Jun 5, 2020 06:39:17 Helpful(0) Helpful(0)

@Harry101

Try to reset the interface statistics for that interface, the burst occurred maybe before the configuration took effect at 11:45. After that monitor again the graph and interface statistic.
Another thing you could do is to simplify the configuration as in this example and check whether you still have any strange behavior, if not, you can adjust the configuration and introduce cbs and cbs.
https://support.huawei.com/hedex/hdx.do?docid=EDOC1000177841&id=dc_cfg_qos_0134_2_2&lang=en

Hope it's useful.
View more
  • x
  • convention:

Harry101 Created Jun 5, 2020 09:40:09
Hi sergio93,
I tested many times and I got same result. I also apply the simple configuration, but the switch added other parameters automaticaly.  
BEST%20ANSWER!%20If%20you%20think%20I%20earn%20it!%3Cbr%2F%3E%3Cbr%2F%3EIf%20this%20post%20was%20useful%20to%20you%2C%20please%20click%20the%20%3Cimg%20id%3D%22aimg_eYhFO%22%20onclick%3D%22zoom(this%2C%20this.src%2C%200%2C%200%2C%200)%22%20class%3D%22zoom%22%20src%3D%22https%3A%2F%2Fforum.huawei.com%2Fenterprise%2Fen%2Fstatic%2Fimage%2Fcommon%2Fsupport01.png%22%20onmouseover%3D%22img_onmouseoverfunc(this)%22%20onload%3D%22thumbImg(this)%22%20border%3D%220%22%20alt%3D%22%22%20%2F%3E%20%3Cfont%20color%3D%22DarkOrange%22%3EHelpful%3C%2Ffont%3E%20button%20and%20flag%20my%20post%20as%20a%20%26quot%3BBEST%20ANSWER%26quot%3B%20so%20others%20can%20benefit.%20Thank%20you%20%3Cimg%20id%3D%22aimg_H808i%22%20onclick%3D%22zoom(this%2C
Sapte Created Jun 5, 2020 15:35:29 Helpful(1) Helpful(1)

Hi @Harry101


 I analyzed your problem in the below

 ROOT CAUSE 

Since you have configured policy traffic shaping based on ACL switch will make peak traffic 15mbps comes from this address : 10.92.92.0 0.0.0.255

Between your switches there are different traffics comes from different sources.In order to see that you can capture packets on the interfaces between switches.


SOLUTION

No need the change anything probably it works.In order to be sure you can anaylze your traffic on wireshark after captured it or mirrored it


Have a nice day !

View more
  • x
  • convention:

chenhui Created Jun 6, 2020 10:21:35
Maybe you are right, if the statistics result contains other traffic. Harry101, please confirm if there are other parts of traffic.  
Harry101 Created Jun 6, 2020 12:07:13
thank @Sapte @chenhui ,
I will capture and update the result later.  
chenhui Admin Created Jun 6, 2020 12:40:45 Helpful(0) Helpful(0)

Hello Harry,
Which OIDs are you using to get the interface sending rate and receiving rate? I tried simulating this, but no proper OIDs are found to get the data.
View more
  • x
  • convention:

Harry101 Created Jun 8, 2020 08:05:52 Helpful(0) Helpful(0)

Hi @Sapte
I tested again and mirror the outbound traffic between 2 switches. I didn't any different traffic. My topology only has 2 laptops connect to 2 switches.


Hi @chenhui
I used eSight tool of Huawei. Can you try with OID:
In: 1.3.6.1.2.1.31.1.1.1.6
Out: 1.3.6.1.2.1.31.1.1.1.10

The unit of CIR/PIR is bps while CBS/PBS is bytes, so I think CBS/PBS should be converted to "bps", and that is the maximum rate when the bucket is full. How do you think about it?

View more
  • x
  • convention:

chenhui Admin Created Jun 10, 2020 05:48:42 Helpful(1) Helpful(1)

Posted by Harry101 at 2020-06-08 08:05Hi @Sapte I tested again and mirror the outbound traffic between 2 switches. I didn't any different ...

Hi

I tried using the Zabbix, the monitoring result is fine.
The only uncertain result is the peak rate when the traffic starts.
For example, when I set the CIR and PIR to 2Mbps, CBS and PBS to 100Mbyte. Then, wait enough time to let the bucket C and bucket P being filled up. Send packets on the iperf3 client with rate 100Mbps which equals to 12.5MByte/s. Thereotially, I think, it will take about 100/12.5=8 seconds to use up the tokens in the bucket. And anothere 2Mbps*8s=16Mbit=2MByte is less than 12.5MByte. The result output on the Zabbix is nearly the same as the infer.
What the strange is that when the PBS is less than 12.5MByte, the result shows the peak rate which can reach is hardly to calculate out, and the peak rate is related to the monitoring interval. The less the interval is, the higher the peak rate can reach.

Back to your quesion. You think that the PBS shoudl be coverted to "bps", and that is the maximum rate when the bucket is full. Actually, the monitered peak rate is based on the monotring interval, as in my test. If, the monitoring interval could be set to 0, which means the NMS could monitor every packet passing through, in such situation, the output peak rate equals to the minimum of converted PBS and input rate. But it's impossible to set the monitoring interval to 0, and the rate displayed on the NMS is an average value of passing track during the monitoring interval.


View more
  • x
  • convention:

Harry101 Created Jun 10, 2020 07:56:21 Helpful(0) Helpful(0)

Hello @chenhui 


Thank you for your explanation. So to get the correct peak rate at the first second, I should reduce the CBS?


And do you have any idea about the result of 2 commands:

car cir 15360 pir 15360 cbs 2887680 pbs 2887680 mode color-blind green pass yellow pass red discard --> output peak rate = 50 Mbps

car cir 15360 pir 15360 cbs 2887680 pbs 2887680 mode color-blind green pass yellow discard red discard --> output peak rate = 30 Mbps


View more
  • x
  • convention:

12
Back to list

Comment

Comment
You need to log in to comment to the post Login | Register

Notice Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!

My Followers

Login and enjoy all the member benefits

Login

Huawei Enterprise Support Community
Huawei Enterprise Support Community
Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.