Description

On Juniper Network EX/QFX switches, we may see drops on the interface showing as "bucket drops"

Symptoms

{master:0}[edit]

user@switch# run show interfaces xe-0/0/47 extensive | match drops

  Errors: 0, Drops: 0, Framing errors: 0, Runts: 0, Bucket drops: 0, Policed discards: 0, L3 incompletes: 0, L2 channel errors: 0, L2 mismatch timeouts: 0, FIFO errors: 0, Resource errors: 0

  Carrier transitions: 0, Errors: 0, Drops: 0, Collisions: 0, Aged packets: 0, FIFO errors: 0, HS link CRC errors: 0, MTU errors: 0, Resource errors: 0, Bucket drops: 3019311

 

Solution

Bucket drops are the result of a policer being applied and hit on an interface.

 

firewall {

   policer 8G {

    if-exceeding {

      bandwidth-limit 8g;

      burst-size-limit 32k;

    }

    then discard;

  }

 

firewall {

  filter rateLimitTo8G {

    term p1 {

      then policer 8G;

    }

    term p2 {

      then {

        discard;

      }

    }

  }

}

 

Adjust the policer if needed to avoid the bucket drops.

Modification History

09/28/2023 - KB Created