Le SSG 200 est conçu pour transporter un trafic 100Gbps Full duplex, c’est-à-dire jusqu’à 100Gbps de trafic entrant et 100Gbps de trafic sortant en mode Inline.
En mode Inline, 2 ports 100G sont orientés vers les abonnés (in) et les deux autres vers l’Internet (out).
vStack-R-ASR201-S08RE2 Spécification du serveur
- AMD EPYC 7713 (64 cœurs)
- Dissipateur thermique 2U
- 8 x 32GB DDR4 RDIMM 3200MHz
- LSI 9361-8i (1 Go)
- 2 x 960GB SATA SSD (slots frontaux, PM893)
- 2 x Dual ports 100Gb Eth QSFP28 PCIe 4.0 (Mellanox MCX516A-CDAT)
- 1 x 1TB NVMe SSD (990 PRO)
- 2 x 1Gb RJ45 (intégré)
- Interface de gestion 1Gb RJ45 dédiée
- 2 x PSU AC 1300W
- Kit de montage en rack
- Garantie standard « 8x5xNext Business Day+5 », 3 ans
Configuration du SSG
[user@server]# grep « ^[^#*/;] » /etc/dpi/fastdpi.conf
#configurer les interfaces, les répartiteurs et les gestionnaires
in_dev=01-00.0:c1-00.0
out_dev=01-00.1:c1-00.1
dpdk_engine=2
dpdk_rss=8
mem_tracking_flow=60000000
mem_tracking_ip=60000000
scale_factor=10
num_threads=46
#filtrage web et protection DDOS
timeout_check_new_bl=1
federal_black_list=1
black_list_redirect=http://isp.ru/blockpage.html?
mem_ssl_parsers=1440000
ddos_reqsec_threshold=300
ddos_reqsec_variation=5
ddos_trace=1
ntf_server=isp.ru
nat_max_profiles=30
max_profiles_white_list=10
ad_server=a.b.c.d
#BRAS L3 IPoE et configuration de la gestion
ipv6=1
bras_ipv6=0
mem_ipv6_tracking_flow=16000000
mem_ipv6_tracking_ip=16000000
enable_auth=1
auth_servers=127.0.0.1%lo:29002
udr=1
ctrl_port=29000
ctrl_dev=eth0
only_tcp=0
ctrl_trace=0
#Téléchargement du journal NAT
ajb_save_nat_format=ts:ssid:event:login:proto:ipsrc:portsrc:ipsrcpostnat:portsrcpostnat:ipdst:portdst
ajb_nat_path=/var/dump/dpi
ajb_nat_ftimeout=1
ajb_save_url_format=ipsrc:uagent
ajb_url_path=/var/dump/dpi
ajb_url_ftimeout=1
#téléchargement de statistiques
ipfix_dev=eth0
ipfix_nat_tcp_collectors=a.b.c.d:9990
ipfix_nat_udp_collectors=a.b.c.d:9990
enable_acct=1
lifetime_flow=60
lifetime_flow_long=150
netflow=12
netflow_dev=eth0
netflow_timeout=1
netflow_full_collector=a.b.c.d:9997
netflow_passive_timeout=120
netflow_active_timeout=280
netflow_rate_limit=5
[SSG ][2024/02/25-22:00:09:827704] Interface statistics :
Cluster #0 Absolute Stats Rcvd: [2615640812745 pkts][2454340817189715 bytes][0+0=0 pkts dropped]
Cluster #0 : IF 01-00.0 (01:00.0):
Absolute Stats Rcvd: [482192736443 pkts][197330047519864 bytes][0 pkts dropped]
Send: [828424002151 pkts][1036092809640068 bytes]
Esnd: [0 err_pkts][0.00 %]
Drop: [878726075 pkts][480501786372 bytes]
Pthr: [0 pkts][0 bytes]
Emit: [333480910 pkts][151850114998 bytes]
Eemt: [0 err_pkts][0.00 %]
Actual Stats Rcvd: [13895784404 bytes][7'410.17 Mbit/sec]
[41145641 pkts ][2'742'707.00 pkt/sec]
Send: [90364281467 bytes][48'188.39Mbit/sec]
[70322226 pkts ][4'687'575.00 pkt/sec]
Esnd: [0 err_pkts][0.00 %]
Drop: [39354170 bytes][0.28 %]
[66557 pkts ][0.16 %]
Pthr: [0 bytes][0.00 %]
[0 pkts ][0.00 %]
Emit: [12061453 bytes][6.43 Mbit/sec]
[25310 pkts ][1'687.12 pkt/sec]
Eemt: [0 err_pkts][0.00 %]
Cluster #0 : IF 01-00.1 (01:00.1):
Absolute Stats Rcvd: [834624954296 pkts][1044237709765712 bytes][0 pkts dropped]
Send: [481314010364 pkts][196849545732453 bytes]
Esnd: [0 err_pkts][0.00 %]
Drop: [6200952142 pkts][8144900121496 bytes]
Pthr: [0 pkts][0 bytes]
Emit: [318412434 pkts][149166083189 bytes]
Eemt: [0 err_pkts][0.00 %]
Actual Stats Rcvd: [91083935501 bytes][48'572.16 Mbit/sec]
[70853091 pkts ][4'722'962.00 pkt/sec]
Send: [13856431407 bytes][7'389.19 Mbit/sec]
[41079083 pkts ][2'738'270.00 pkt/sec]
Esnd: [0 err_pkts][0.00 %]
Drop: [719652932 bytes][0.79 %]
[530866 pkts ][0.75 %]
Pthr: [0 bytes][0.00 %]
[0 pkts ][0.00 %]
Emit: [11816447 bytes][6.30 Mbit/sec]
[24431 pkts ][1'628.53 pkt/sec]
Eemt: [0 err_pkts][0.00 %]
Cluster #0 : IF c1-00.0 (c1:00.0):
Absolute Stats Rcvd: [485789098077 pkts][200219597609833 bytes][0 pkts dropped]
Send: [807070736464 pkts][1004751894036147 bytes]
Esnd: [0 err_pkts][0.00 %]
Drop: [873933018 pkts][479111895431 bytes]
Pthr: [0 pkts][0 bytes]
Emit: [333436769 pkts][151796258034 bytes]
Eemt: [0 err_pkts][0.00 %]
Actual Stats Rcvd: [14381469179 bytes][7'669.17 Mbit/sec]
[41475400 pkts ][2'764'688.00 pkt/sec]
Send: [89993320396 bytes][47'990.57 Mbit/sec]
[70008888 pkts ][4'666'688.00 pkt/sec]
Esnd: [0 err_pkts][0.00 %]
Drop: [39061880 bytes][0.27 %]
[66042 pkts ][0.16 %]
Pthr: [0 bytes][0.00 %]
[0 pkts ][0.00 %]
Emit: [12031307 bytes][6.42 Mbit/sec]
[25223 pkts ][1'681.32 pkt/sec]
Eemt: [0 err_pkts][0.00 %]
Cluster #0 : IF c1-00.1 (c1:00.1):
Absolute Stats Rcvd: [813034023929 pkts][1012553462294306 bytes][0 pkts dropped]
Send: [484915165056 pkts][199740485712619 bytes]
Esnd: [0 err_pkts][0.00 %]
Drop: [5963287463 pkts][7801568255123 bytes]
Pthr: [0 pkts][0 bytes]
Emit: [318272267 pkts][149067418316 bytes]
Eemt: [0 err_pkts][0.00 %]
Actual Stats Rcvd: [90639110526 bytes][48'334.95 Mbit/sec]
[70487649 pkts ][4'698'602.00 pkt/sec]
Send: [14342405516 bytes][7'648.34 Mbit/sec]
[41409355 pkts ][2'760'286.00 pkt/sec]
Esnd: [0 err_pkts][0.00 %]
Drop: [645795371 bytes][0.71 %]
[478766 pkts ][0.68 %]
Pthr: [0 bytes][0.00 %]
[0 pkts ][0.00 %]
Emit: [11785381 bytes][6.28 Mbit/sec]
[24357 pkts ][1'623.60 pkt/sec]
Eemt: [0 err_pkts][0.00 %]