This article will explain about the 'bucket-size' setting for icmpv4-rate-limit, covering how to configure it, its impact, and whether it is applicable to QFX devices in an EVPN-VXLAN fabric architecture.
N/A
The command set system internet-options icmpv4-rate-limit bucket-size <number of seconds> is used to limit the rate at which ICMPv4 messages can be generated and sent by the Routing Engine. The mentioned rate-limiting configuration specifically targets ICMPv4 messages. It does not directly impact other protocols.
Reference links:
https://www.juniper.net/documentation/us/en/software/junos/system-mgmt-monitoring/transport-ip/topics/topic-map/icmp.html
https://www.juniper.net/documentation/us/en/software/junos/cli-reference/topics/ref/statement/internet-options-edit-system.html
https://www.juniper.net/documentation/us/en/software/junos/cli-reference/topics/ref/statement/icmp-edit-chassis.html
Impact: Implementing this command can have an impact on the system, particularly in scenarios where ICMP traffic is high. For example, if the rate limit is set too low, it may result in dropped ICMP packets, which can affect network diagnostics and monitoring tools that rely on ICMP, such as ping. This is not a software bug but a default rate-limiting behavior to prevent potential denial of service (DoS) attacks. To summarize, while the command itself does not cause disruption, the rate limit you set can impact ICMP traffic handling. It is important to configure the rate limit appropriately based on your network requirements to avoid unintended packet drops.
Compatibility: The mentioned command is supported/applicable to QFX devices in an EVPN-VXLAN fabric architecture. However check with implementation team and configure it accordingly.