Dell Z9000 Configuration Manual page 245

Increased CPU Queues for CoPP
FTOS classifies every packet ingress from the front end port to system as control traffic or data traffic by
having the pre-defined rules based on protocol type or packets types like ttl, slow path etc. FP is used to
classify the traffic to transmit the control traffic to CMIC port. Other major function performed by the FP
rule is to decide to which CPU queue the packet must be sent. All other packets will be forwarded or
dropped at the ingress.
All packet transmitted to CPU will transmit to local CPU by using the CPU queues and processed. But in
stacked system only mater CPU is responsible for the control plane actions. So control packets received
in master or slave units will be tunneled to master CPU to process.
As part of enhancements, CPU queues are increased from 8 to 12 on CPU port. However, the front-end
port and the backplane ports support only 8 queues. As a result, when packets are transmitted to the
local CPU, the CPU uses Q0-Q11 queues. The control packets that are tunneled to the master unit are
isolated from the data queues and the control queues in the backplane links. Control traffic must be sent
over the control queues Q4-Q7 on higig links. After reaching the master unit tunneled packets must be
transmitted to the CPU using the Q0-Q11 queues.
The backplane ports can have a maximum of 4 control queues. So, when we have more than 'n' CMIC
queues for well-known protocols and n > 4, then streams on 'n' CMIC queues must be multiplexed on 4
control queues on back-plane ports and on the Master unit, these streams must be de-multiplexed to 'n'
CMIC queues on the Master CPU.
After control packets reach the CPU through the CMIC port, the software schedules to process traffic on
each 12 CPU queues. This aspect must be ensured even in case of stand-alone systems and there is no
dependency with stacking.
Policing provides a method for protecting CPU bound control plane packets by policing packets
transmited to CPU with a specified rate and from undesired or malicious traffic. This is done at each CPU
queue on each unit.
FP Entries for Distribution of NDP Packets to Various CPU Queues
• At present generic mac based entries in system flow region will take IPv6 packets to CPU.
– OSPFv3 – 33:33:0:0:0:5 – Q7
– - 33:33:0:0:0:6 – Q7
– IPv6 Multicast – 33:33:0:0:0:0 – Q1
• Add/remove specific ICMPv6 NDP protocol entry when user configures the first ipv6 address in the
front panel port
– Distribute ICMPv6 NS/RS packets to Q5.
– Distribute ICMPv6 NA/RA packets to Q6.
FP is installed for all Front panel ports.
Control Plane Policing (CoPP)
245