topic Re: CPS average for DDos protection configuration in General Topics

CPS average for DDos protection configuration

Mamoudou — Mon, 21 Mar 2022 09:07:10 GMT

Hello Team,

I have a problem with the choice of CPS average value. When i made the command show session info which parameter I have to consider to calculate my CPS rate average ? Number of allocated sessions or packet rate or New connection establish rate.

Number of sessions supported: 196606
Number of allocated sessions: 28883
Number of active TCP sessions: 13509
Number of active UDP sessions: 14892
Number of active ICMP sessions: 480
Number of active GTPc sessions: 0
Number of active GTPu sessions: 0
Number of pending GTPu sessions 0
Number of active BCAST sessions: 0
Number of active MCAST sessions: 0
Number of active predict sessions: 48
Number of active SCTP sessions: 0
Number of active SCTP associations: 0
Session table utilization: 14%
Number of sessions created since bootup: 1841876180
Packet rate: 38578/s
Throughput: 214833 kbps
New connection establish rate: 366 cps

Thank you in advance.

Re: CPS average for DDos protection configuration

kiwi — Thu, 24 Mar 2022 09:08:33 GMT

Hi @Mamoudou ,

The following article explains how to calculate CPS:

How to measure CPS

Cheers,

-Kiwi.

Re: CPS average for DDos protection configuration

Mamoudou — Thu, 24 Mar 2022 09:18:17 GMT

Thanks for your response.

I have already read this document but I'm still confused about which value I have to choose for DDos profile. If I made show session info which one to choose between :

Number of allocated sessions or packet rate or New connection establish rate.

Regards

Re: CPS average for DDos protection configuration

kiwi — Mon, 28 Mar 2022 09:16:59 GMT

Hi @Mamoudou ,

For classified DoS Protection profiles, measure the average and peak CPS of the individual devices you want to protect.

New connection establish rate: 366 cps

Cheers,

-Kiwi.

Re: CPS average for DDos protection configuration

Mamoudou — Mon, 28 Mar 2022 09:49:07 GMT

Hello,

Thank you for your response.

We want to use aggregate DoS Protection profiles what about this ?

If I get you I have to measure the average of "New connection establish rate" ?

Kind regards

Re: CPS average for DDos protection configuration

kiwi — Mon, 28 Mar 2022 09:52:41 GMT

Hi @Mamoudou ,

For aggregate DoS Protection profiles, measure the combined average and peak CPS for each group of devices you want to protect.

Source: CPS Measurements to Take

Cheers,

-Kiwi.

Re: CPS average for DDos protection configuration

Mamoudou — Mon, 28 Mar 2022 10:01:52 GMT

Ok great.

My last question is :

Should measure average with New connection establish rate: 366 cps ?

Thanks