5 Aug
2026
5 Aug
'26
6:22 a.m.
On Wed, 5 Aug 2026 at 00:01, Lukas Tribus <lukas@ltri.eu> wrote:
Take an ASR9000 for example. A basic implementation that sets a ingress qos-group/cos/dscp/exp bit for the attacked /32 and has an egress queue configurations which deprioritizes scavenger traffic can do nothing in a DoS situation.
I don't think this is true. You set 'priority level 1' for NC+AF, 'priority level 2' for BE, and leave LE unset on the ingress policy. This sets the fabric priority, and VoQ will honor it. -- ++ytti