CPS average for DDos protection configuration

[Mamoudou]

Hello Team,

I have a problem with the choice of CPS average value. When i made the command show session info which parameter I have to consider to calculate my CPS rate average ? Number of allocated sessions or packet rate or New connection establish rate.

Number of sessions supported:                    196606
        Number of allocated sessions:             28883
        Number of active TCP sessions:          13509
        Number of active UDP sessions:          14892
        Number of active ICMP sessions:         480
        Number of active GTPc sessions:         0
        Number of active GTPu sessions:         0
        Number of pending GTPu sessions                0
        Number of active BCAST sessions:                 0
        Number of active MCAST sessions:                 0
        Number of active predict sessions:               48
        Number of active SCTP sessions:                  0
        Number of active SCTP associations:              0
        Session table utilization:                       14%
        Number of sessions created since bootup:         1841876180
        Packet rate:                                      38578/s
        Throughput:                                      214833 kbps
        New connection establish rate:    366 cps

Thank you in advance.

[kiwi]

Hi @Mamoudou ,

The following article explains how to calculate CPS:

How to measure CPS

Cheers,

-Kiwi.

[Mamoudou]

Thanks for your response.

I have already read this document but I'm still confused about which value I have to choose for DDos profile. If I made show session info which one to choose between :

Number of allocated sessions or packet rate or New connection establish rate.

Regards

[kiwi]

Hi @Mamoudou ,

For classified DoS Protection profiles, measure the average and peak CPS of the individual devices you want to protect.

New connection establish rate: 366 cps

Cheers,

-Kiwi.

[Mamoudou]

Hello,

Thank you for your response.

We want to use aggregate DoS Protection profiles what about this ?

If I get you I have to measure the average of "New connection establish rate" ?

Kind regards

[kiwi]

Hi @Mamoudou ,

For aggregate DoS Protection profiles, measure the combined average and peak CPS for each group of devices you want to protect.

Source: CPS Measurements to Take

Cheers,

-Kiwi.

[Mamoudou]

Ok great.

My last question is :

Should measure average with New connection establish rate: 366 cps ?

Thanks