Dans la continuité de l’article sur les spécifications de la solution SSG-120, nous allons examiner un exemple de charge de travail réelle sur un processeur 128 cœurs pour le SSG-240 en mode BRAS/NAT/DPI.
| Version SSG | SSG-120 | SSG-240 |
| Processeur AMD EPYC | 64 cœurs | 128 cœurs |
| Mémoire DDR4/DDR5 | 8x32GB | 12x32GB |
| NIC | 8x40G, 20x10G, 8x25G, 4x100G | 16x25G, 8x100G |
Spécifications du serveur ITPOD
- AMD EPYC 9754 (128 cœurs)
- 2U Heatsink
- 12 x 32GB DDR5 RDIMM 5600MHz
- 2 x 960GB SATA SSDs (front slots, PM893)
- 2 x Dual-port 100Gb Ethernet QSFP28 PCIe 4.0
- 1 x 1TB NVMe SSD (990 PRO)
- 2 x 1Gb RJ45 (intégrées)
- Interface de gestion RJ45 1 Gb dédiée
- 2 x AC 1300W PSUs
- Rack Mount Kit
- Garantie standard de 3 ans « 8x5xNext Business Day+5 »
Le SSG-240 offre un débit pouvant atteindre 240 Gbit/s de trafic total (entrant + sortant) en mode en ligne. Les paramètres clés sont le nombre de paquets par seconde (PPS) dans chaque direction et la taille des paquets en octets. Dans la suite de cet article, la longueur des paquets est calculée en incluant les en-têtes.
Configuration SSG 4x100G sur les interfaces en mode en ligne
Dans la configuration en ligne, deux ports 100G sont orientés vers les abonnés (entrée) et les deux autres ports sont orientés vers Internet (sortie).
in_dev=41-00.1:01-00.1 out_dev=41-00.0:01-00.0 dpdk_engine=7 dpdk_mempool=name=bridge100G_1;size=8000000 dpdk_mempool=name=bridge100G_2;size=8000000 dpdk_dispatch=41-00.0,41-00.1;rss=8;mempool=bridge100G_1 dpdk_dispatch=01-00.0,01-00.1;rss=8;mempool=bridge100G_2 #Scale factor is about 1 for every 1 Gigabit of total bandwidth scale_factor=10 num_threads=98 mem_slices_flow=32 mem_slices_ip=32 mem_tracking_flow=200000000 mem_tracking_ip=160000000 mem_ssl_parsers=18000000 mem_http_parsers=512000 dpdk_tx_queue_size=8160 rx_dispatcher=2 cloud=0 mem_ip_billdata_recs=500000 #FDPI/CLI Control ctrl_port=29000 ctrl_dev=lo federal_black_list=0 black_list_redirect= netflow=4 enable_acct=1 ajb_reserved=1 enable_auth=1 auth_servers=127.0.0.1%lo:29002 bras_enable=1 bras_arp_ip=172.16.120.2 bras_arp_mac=6c:b3:11:79:81:5d bras_gateway_ip=172.16.120.1 bras_gateway_mac=bc:24:11:27:8b:f0 bras_terminate_local=0 bras_terminate_l2=1 bras_dhcp_mode=2 bras_dhcp_ratelimit=17 bras_dhcp_disconnect=0x000B bras_dhcp_timeout=17 bras_vlan_terminate=2 bras_arp_proxy=0x006 bras_vlan_subst=4029 bras_subs_id=qinq+mac,vlan+mac,mac bras_ip4db_bucket_count=1048576 bras_term_by_as=1
Statistiques de traitement du trafic sur les interfaces 4x100G en mode en ligne
- Trafic entrant : 158 Gbit/s, PPS : 16,4 M, taille des paquets : 1 260 octets
- Trafic sortant : 39 Gbit/s, PPS : 16,4 M, taille des paquets : 312 octets
- PPS total : 32,8 M
[STAT ][2026/01/26-16:56:34:518825] Interface statistics : Cluster #0 Absolute Stats Rcvd: [1616452270 pkts][1197971359348 bytes][0+209219=209219 pkts dropped] Cluster #0 : IF 41-00.1 (41:00.1): Absolute Stats Rcvd: [468141698 pkts][139474909794 bytes][0 pkts dropped] Send: [426551293 pkts][512537280418 bytes] Esnd: [0 err_pkts][0.00 %] Drop: [89961 pkts][29443520 bytes] Pthr: [0 pkts][0 bytes] Emit: [88318 pkts][6741464 bytes] Eemt: [0 err_pkts][0.00 %] Actual Stats Rcvd: [36662244318 bytes][19'549.74 Mbit/sec] [123042483 pkts ][8'201'383.00 pkt/sec] Send: [147874001808 bytes][78'852.20 Mbit/sec] [123042488 pkts ][8'201'384.00 pkt/sec] Esnd: [0 err_pkts][0.00 %] Drop: [0 bytes][0.00 %] [0 pkts ][0.00 %] Pthr: [0 bytes][0.00 %] [0 pkts ][0.00 %] Emit: [0 bytes][0.00 Mbit/sec] [0 pkts ][0.00 pkt/sec] Eemt: [0 err_pkts][0.00 %] Cluster #0 : IF 41-00.0 (41:00.0): Absolute Stats Rcvd: [426392676 pkts][512523977832 bytes][0 pkts dropped] Send: [467893084 pkts][139432135784 bytes] Esnd: [0 err_pkts][0.00 %] Drop: [0 pkts][0 bytes] Pthr: [0 pkts][0 bytes] Emit: [0 pkts][0 bytes] Eemt: [0 err_pkts][0.00 %] Actual Stats Rcvd: [147872266400 bytes][78'851.28 Mbit/sec] [123021855 pkts ][8'200'008.00 pkt/sec] Send: [36660512208 bytes][19'548.82 Mbit/sec] [123021855 pkts ][8'200'008.00 pkt/sec] Esnd: [0 err_pkts][0.00 %] Drop: [0 bytes][0.00 %] [0 pkts ][0.00 %] Pthr: [0 bytes][0.00 %] [0 pkts ][0.00 %] Emit: [0 bytes][0.00 Mbit/sec] [0 pkts ][0.00 pkt/sec] Eemt: [0 err_pkts][0.00 %] Cluster #0 : IF 01-00.1 (01:00.1): Absolute Stats Rcvd: [355910544 pkts][106031737210 bytes][0 pkts dropped] Send: [366158163 pkts][439953375804 bytes] Esnd: [0 err_pkts][0.00 %] Drop: [91818 pkts][30037760 bytes] Pthr: [0 pkts][0 bytes] Emit: [89257 pkts][6690810 bytes] Eemt: [0 err_pkts][0.00 %] Actual Stats Rcvd: [36661754958 bytes][19'549.48 Mbit/sec] [123036650 pkts ][8'200'995.00 pkt/sec] Send: [147873580916 bytes][78'851.98 Mbit/sec] [123036719 pkts ][8'200'999.00 pkt/sec] Esnd: [0 err_pkts][0.00 %] Drop: [0 bytes][0.00 %] [0 pkts ][0.00 %] Pthr: [0 bytes][0.00 %] [0 pkts ][0.00 %] Emit: [0 bytes][0.00 Mbit/sec] [0 pkts ][0.00 pkt/sec] Eemt: [0 err_pkts][0.00 %] Cluster #0 : IF 01-00.0 (01:00.0): Absolute Stats Rcvd: [366007352 pkts][439940734512 bytes][0 pkts dropped] Send: [355667870 pkts][105989023052 bytes] Esnd: [0 err_pkts][0.00 %] Drop: [0 pkts][0 bytes] Pthr: [0 pkts][0 bytes] Emit: [0 pkts][0 bytes] Eemt: [0 err_pkts][0.00 %] Actual Stats Rcvd: [147872343978 bytes][78'851.32 Mbit/sec] [123021927 pkts ][8'200'013.00 pkt/sec] Send: [36660514096 bytes][19'548.82 Mbit/sec] [123021860 pkts ][8'200'009.00 pkt/sec] Esnd: [0 err_pkts][0.00 %] Drop: [0 bytes][0.00 %] [0 pkts ][0.00 %] Pthr: [0 bytes][0.00 %] [0 pkts ][0.00 %] Emit: [0 bytes][0.00 Mbit/sec] [0 pkts ][0.00 pkt/sec] Eemt: [0 err_pkts][0.00 %] Cluster #0 : Aggregated Actual stats: [Captured 32'802'397.00 pkt/sec][Processed 32'802'401.00 pkt/sec][Send 32'802'399.00 pkt/sec]
Schéma On-stick du SSG-240 avec interfaces 4x100G
La configuration recommandée est indiquée à gauche : un LAG 4x100G avec deux ports 100G sur chaque carte avec prise en charge de la redondance des liaisons.
À droite : un LAG 4x100G avec un port 100G sur chaque carte sans prise en charge de la redondance des liaisons.
Configuration On-stick des interfaces SSG 4x100G
dpdk_device=port1:pci:01:00.0
dpdk_device=port2:pci:01:00.1
dpdk_device=port3:pci:41:00.0
dpdk_device=port4:pci:41:00.1
lag {
name=LAG_ONSTICK
device=01:00.0
device=01:00.1
device=41:00.0
device=41:00.1
lacp=2
system_id=10:70:fd:15:55:2c
priority=32768
balance_algo=1
}
onstick_device {
base=port1
filter=vlan(254,738,742)
subs=lan1
inet=wan1
}
onstick_device {
base=port2
filter=vlan(254,738,742)
subs=lan2
inet=wan2
}
onstick_device {
base=port3
filter=vlan(254,738,742)
subs=lan3
inet=wan3
}
onstick_device {
base=port4
filter=vlan(254,738,742)
subs=lan4
inet=wan4
}
in_dev=lan1:lan2:lan3:lan4
out_dev=wan1:wan2:wan3:wan4
#Scale factor is about 1 for every 1 Gigabit of total bandwidth
scale_factor=10
num_threads=86
dpdk_engine=6
dpdk_rss=10
rx_dispatcher=2
#FDPI/CLI Control
ctrl_port=29000
ctrl_dev=lo
mem_tracking_flow=60000000
mem_tracking_ip=60000000
mem_ssl_parsers=4320000
mem_http_parsers=960000
#Enable automatic update of black list from the Cloud
timeout_check_new_bl=1
federal_black_list=true
black_list_redirect=vasexperts.ru
#Profiles
nat_max_profiles=30
max_profiles_white_list=10
#BRAS
enable_auth=1
auth_servers=127.0.0.1%lo:29002
ipfix_dev=enp6s0f0
ipfix_nat_tcp_collectors=10.10.43.4:9991
#Radius accouting
enable_acct=1
#NAT
lifetime_flow=60
lifetime_flow_long=150
#Netflow
netflow=12
netflow_dev=enp6s0f0
netflow_timeout=1
netflow_full_collector=10.10.43.4:9998
netflow_passive_timeout=120
netflow_active_timeout=280
netflow_rate_limit=5
Statistiques de traitement du trafic sur les interfaces 4x100G en mode sur carte
- Trafic entrant : 158 Gbit/s, PPS : 15,2 M, taille des paquets : 1 383 octets
- Trafic sortant : 23,5 Gbit/s, PPS : 7,4 M, taille des paquets : 356 octets
- PPS total : 22,6 M
[STAT ][2026/01/26-21:43:38:160165] Interface statistics : Cluster #0 Absolute Stats Rcvd: [40920403044266 pkts][40575909193056203 bytes][0+0=0 pkts dropped] Cluster #0 : IF lan1 (lan1): Absolute Stats Rcvd: [3493117350451 pkts][1447832212826389 bytes][0 pkts dropped] Send: [6732203441634 pkts][8698047024094296 bytes] Esnd: [71575288 err_pkts][0.00 %] Drop: [6186608905 pkts][3187567927248 bytes] Pthr: [0 pkts][0 bytes] Emit: [2059673201 pkts][875016289173 bytes] Eemt: [9482 err_pkts][0.00 %] Actual Stats Rcvd: [10517859633 bytes][5'607.42 Mbit/sec] [28031348 pkts ][1'868'055.00 pkt/sec] Send: [74045964658 bytes][39'476.36 Mbit/sec] [56155003 pkts ][3'742'262.00 pkt/sec] Esnd: [0 err_pkts][0.00 %] Drop: [17359788 bytes][0.17 %] [36657 pkts ][0.13 %] Pthr: [0 bytes][0.00 %] [0 pkts ][0.00 %] Emit: [3470172 bytes][1.85 Mbit/sec] [7443 pkts ][496.01 pkt/sec] Eemt: [0 err_pkts][0.00 %] Cluster #0 : IF wan1 (wan1): Absolute Stats Rcvd: [6789877113771 pkts][8774949375725563 bytes][0 pkts dropped] Send: [3486903912867 pkts][1444634708745317 bytes] Esnd: [26843609 err_pkts][0.00 %] Drop: [57602106326 pkts][76804041602010 bytes] Pthr: [0 pkts][0 bytes] Emit: [2708729810 pkts][1272831495411 bytes] Eemt: [14934 err_pkts][0.00 %] Actual Stats Rcvd: [74636752953 bytes][39'791.33 Mbit/sec] [56578031 pkts ][3'770'454.00 pkt/sec] Send: [10500498697 bytes][5'598.16 Mbit/sec] [27994690 pkts ][1'865'612.00 pkt/sec] Esnd: [0 err_pkts][0.00 %] Drop: [590788259 bytes][0.79 %] [423027 pkts ][0.75 %] Pthr: [0 bytes][0.00 %] [0 pkts ][0.00 %] Emit: [3885572 bytes][2.07 Mbit/sec] [8838 pkts ][588.98 pkt/sec] Eemt: [0 err_pkts][0.00 %] Cluster #0 : IF lan2 (lan2): Absolute Stats Rcvd: [3515391549224 pkts][1457883250041841 bytes][0 pkts dropped] Send: [6635273081450 pkts][8580969881950994 bytes] Esnd: [50941187 err_pkts][0.00 %] Drop: [6201623782 pkts][3191395743869 bytes] Pthr: [0 pkts][0 bytes] Emit: [2058451905 pkts][874829070829 bytes] Eemt: [6845 err_pkts][0.00 %] Actual Stats Rcvd: [10695182600 bytes][5'701.95 Mbit/sec] [28186823 pkts ][1'878'416.00 pkt/sec] Send: [74840831117 bytes][39'900.13 Mbit/sec] [56827390 pkts ][3'787'071.00 pkt/sec] Esnd: [36 err_pkts][0.00 %] Drop: [16679697 bytes][0.16 %] [36050 pkts ][0.13 %] Pthr: [0 bytes][0.00 %] [0 pkts ][0.00 %] Emit: [3468125 bytes][1.85 Mbit/sec] [7601 pkts ][506.54 pkt/sec] Eemt: [0 err_pkts][0.00 %] Cluster #0 : IF wan2 (wan2): Absolute Stats Rcvd: [6691971188183 pkts][8656758128102734 bytes][0 pkts dropped] Send: [3509170565242 pkts][1454684493652138 bytes] Esnd: [19370849 err_pkts][0.00 %] Drop: [56647172384 pkts][75718189465831 bytes] Pthr: [0 pkts][0 bytes] Emit: [2685177583 pkts][1266273559580 bytes] Eemt: [10651 err_pkts][0.00 %] Actual Stats Rcvd: [75421544965 bytes][40'209.73 Mbit/sec] [57238948 pkts ][3'814'498.00 pkt/sec] Send: [10678500979 bytes][5'693.06 Mbit/sec] [28150768 pkts ][1'876'013.00 pkt/sec] Esnd: [4 err_pkts][0.00 %] Drop: [580665234 bytes][0.77 %] [411518 pkts ][0.72 %] Pthr: [0 bytes][0.00 %] [0 pkts ][0.00 %] Emit: [3889780 bytes][2.07 Mbit/sec] [8905 pkts ][593.44 pkt/sec] Eemt: [0 err_pkts][0.00 %] Cluster #0 : IF lan3 (lan3): Absolute Stats Rcvd: [3496762864096 pkts][1443367095466582 bytes][24177 pkts dropped] Send: [6668255223711 pkts][8613905930204300 bytes] Esnd: [2893272070 err_pkts][0.04 %] Drop: [6222948359 pkts][3185359338183 bytes] Pthr: [0 pkts][0 bytes] Emit: [2059255104 pkts][874961930417 bytes] Eemt: [392757 err_pkts][0.02 %] Actual Stats Rcvd: [10322634140 bytes][5'503.34 Mbit/sec] [27846731 pkts ][1'855'752.00 pkt/sec] Send: [73966765218 bytes][39'434.14 Mbit/sec] [56177450 pkts ][3'743'758.00 pkt/sec] Esnd: [229 err_pkts][0.00 %] Drop: [19213036 bytes][0.19 %] [46595 pkts ][0.17 %] Pthr: [0 bytes][0.00 %] [0 pkts ][0.00 %] Emit: [3490092 bytes][1.86 Mbit/sec] [7550 pkts ][503.14 pkt/sec] Eemt: [0 err_pkts][0.00 %] Cluster #0 : IF wan3 (wan3): Absolute Stats Rcvd: [6728222540651 pkts][8693875918383461 bytes][24177 pkts dropped] Send: [3489402063951 pkts][1439802358731835 bytes] Esnd: [1138497677 err_pkts][0.03 %] Drop: [57074437625 pkts][75972551129603 bytes] Pthr: [0 pkts][0 bytes] Emit: [2708295723 pkts][1273592373870 bytes] Eemt: [645893 err_pkts][0.02 %] Actual Stats Rcvd: [74531170254 bytes][39'735.04 Mbit/sec] [56583014 pkts ][3'770'786.00 pkt/sec] Send: [10303392371 bytes][5'493.08 Mbit/sec] [27800053 pkts ][1'852'641.00 pkt/sec] Esnd: [82 err_pkts][0.00 %] Drop: [564088806 bytes][0.76 %] [405334 pkts ][0.72 %] Pthr: [0 bytes][0.00 %] [0 pkts ][0.00 %] Emit: [3873336 bytes][2.07 Mbit/sec] [8869 pkts ][591.04 pkt/sec] Eemt: [0 err_pkts][0.00 %] Cluster #0 : IF lan4 (lan4): Absolute Stats Rcvd: [3517637869062 pkts][1457103385726592 bytes][417379 pkts dropped] Send: [6629490304757 pkts][8566776091398965 bytes] Esnd: [1566594506 err_pkts][0.02 %] Drop: [6200216130 pkts][3196075595590 bytes] Pthr: [0 pkts][0 bytes] Emit: [2058062773 pkts][874675975579 bytes] Eemt: [192633 err_pkts][0.01 %] Actual Stats Rcvd: [10224903727 bytes][5'451.23 Mbit/sec] [27629345 pkts ][1'841'265.00 pkt/sec] Send: [75000229020 bytes][39'985.11 Mbit/sec] [56718068 pkts ][3'779'786.00 pkt/sec] Esnd: [212 err_pkts][0.00 %] Drop: [17462668 bytes][0.17 %] [37511 pkts ][0.14 %] Pthr: [0 bytes][0.00 %] [0 pkts ][0.00 %] Emit: [3487674 bytes][1.86 Mbit/sec] [7471 pkts ][497.88 pkt/sec] Eemt: [0 err_pkts][0.00 %] Cluster #0 : IF wan4 (wan4): Absolute Stats Rcvd: [6687422568828 pkts][8644139826783041 bytes][417379 pkts dropped] Send: [3510827102815 pkts][1453693436009343 bytes] Esnd: [610865738 err_pkts][0.02 %] Drop: [56365862196 pkts][75191342483056 bytes] Pthr: [0 pkts][0 bytes] Emit: [2684033015 pkts][1265385413012 bytes] Eemt: [315622 err_pkts][0.01 %] Actual Stats Rcvd: [75539672165 bytes][40'272.71 Mbit/sec] [57105809 pkts ][3'805'626.00 pkt/sec] Send: [10207355309 bytes][5'441.88 Mbit/sec] [27591712 pkts ][1'838'757.00 pkt/sec] Esnd: [124 err_pkts][0.00 %] Drop: [539158876 bytes][0.71 %] [387531 pkts ][0.68 %] Pthr: [0 bytes][0.00 %] [0 pkts ][0.00 %] Emit: [3882406 bytes][2.07 Mbit/sec] [8809 pkts ][587.05 pkt/sec] Eemt: [0 err_pkts][0.00 %] Cluster #0 : Aggregated Actual stats: [Captured 45'210'674.00 pkt/sec][Processed 22'604'855.00 pkt/sec][Send 44'981'476.00 pkt/sec]
