FPR3130 multi-instance routing scale

[andrew.butterworth]

What is the maximum number of BGP Prefixes that a 'large' containerised FTD instance in a FPR3130 chassis can support.

I can't find this documented anywhere.  I can't just receive the default because there is more going on.

[MHM Cisco World]

if there is no BGP connect behind FPR why you not receive only default ?

[andrew.butterworth]

There is a BGP connection behind it where we have a default being received on another FTD instance.

[MHM Cisco World]

so you need to receive full table.

I will check if I get something I will update you

MHM

[MHM Cisco World]

BRKSEC‑2239 <<- according to this 100K route is test for frp3100 series.

MHM

[andrew.butterworth]

100K is plenty, I'm guessing this is single instance though with all the 128GB RAM allocated to the appliance.  In multi-instance mode, the default 'large' instance has 23GB RAM allocated according to the 'show version' command, so will be reduced I guess?

[MHM Cisco World]

How many instances you config?

From 128 to 23' there is huge different it even not close to half of 128.

And it true I think number in ciscolive is for single instance and for multi the number is reduces.

But let assume that 

128=100k

32=25k 

25k is ok for your bgp full table?

MHM

[andrew.butterworth]

Might not be enough - if it's straight numbers like you've written, 23GB will give us around 18k routes maximum.  I can aggregate the RFC1918 addresses that are announced, so that will reduce what is advertised downstream by a lot, but won't reduce the prefixes on this box.  I might see if the provider can aggregate on their side and just announce the RFC1918 summaries to us and exclude all the longer prefixes, plus the other non-RFC1918's as they are as there are only about 2k.

[MHM Cisco World]

But ISP must not advertise rfc1918.

And 25k or 18k is ok for your non-rfc1918 (2k) requirements.

I have other slide about fpr instance' I will check it and if I get something I will update you.

Thanks 

MHM

[andrew.butterworth]

This isn't an ISP, its a private community network that has both private and public IPv4 address space within it.