topic Re: FPR3130 multi-instance routing scale in Network Security

FPR3130 multi-instance routing scale

andrew.butterworth — Fri, 08 Aug 2025 14:32:15 GMT

What is the maximum number of BGP Prefixes that a 'large' containerised FTD instance in a FPR3130 chassis can support.

I can't find this documented anywhere. I can't just receive the default because there is more going on.

Re: FPR3130 multi-instance routing scale

MHM Cisco World — Fri, 08 Aug 2025 14:43:30 GMT

if there is no BGP connect behind FPR why you not receive only default ?

Re: FPR3130 multi-instance routing scale

andrew.butterworth — Fri, 08 Aug 2025 14:46:17 GMT

There is a BGP connection behind it where we have a default being received on another FTD instance.

Re: FPR3130 multi-instance routing scale

MHM Cisco World — Fri, 08 Aug 2025 14:51:32 GMT

so you need to receive full table.

I will check if I get something I will update you

MHM

Re: FPR3130 multi-instance routing scale

MHM Cisco World — Fri, 08 Aug 2025 17:43:45 GMT

BRKSEC‑2239 <<- according to this 100K route is test for frp3100 series.

MHM

Re: FPR3130 multi-instance routing scale

andrew.butterworth — Fri, 08 Aug 2025 18:19:53 GMT

100K is plenty, I'm guessing this is single instance though with all the 128GB RAM allocated to the appliance. In multi-instance mode, the default 'large' instance has 23GB RAM allocated according to the 'show version' command, so will be reduced I guess?

Re: FPR3130 multi-instance routing scale

MHM Cisco World — Fri, 08 Aug 2025 18:34:43 GMT

How many instances you config?

From 128 to 23' there is huge different it even not close to half of 128.

And it true I think number in ciscolive is for single instance and for multi the number is reduces.

But let assume that

128=100k

32=25k

25k is ok for your bgp full table?

MHM

Re: FPR3130 multi-instance routing scale

andrew.butterworth — Fri, 08 Aug 2025 18:43:38 GMT

Might not be enough - if it's straight numbers like you've written, 23GB will give us around 18k routes maximum. I can aggregate the RFC1918 addresses that are announced, so that will reduce what is advertised downstream by a lot, but won't reduce the prefixes on this box. I might see if the provider can aggregate on their side and just announce the RFC1918 summaries to us and exclude all the longer prefixes, plus the other non-RFC1918's as they are as there are only about 2k.

Re: FPR3130 multi-instance routing scale

MHM Cisco World — Fri, 08 Aug 2025 18:57:06 GMT

But ISP must not advertise rfc1918.

And 25k or 18k is ok for your non-rfc1918 (2k) requirements.

I have other slide about fpr instance' I will check it and if I get something I will update you.

Thanks

MHM

Re: FPR3130 multi-instance routing scale

andrew.butterworth — Fri, 08 Aug 2025 18:58:51 GMT

This isn't an ISP, its a private community network that has both private and public IPv4 address space within it.