Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

flow analyzer

Syntax

Hierarchy Level

Description

Configure the DC Flow Analyzer (DFA) feature to learn and monitor traffic flows on the device. The DFA also helps track RDMA ROCEv2 flow destination queue pair information in Junos OS Evolved and other AI DC workloads. DFA continuously tracks flows by dynamically learning a default flow tuple that includes source and destination IP addresses, IP protocol, ingress interface, Layer 4 source and destination ports, etherType, and destination queue pair. This feature monitors successful and dropped flows, and supports IPv4 and IPv6 traffic. Each learned flow is associated with per‑flow counters and timing information (for example, active time and byte or packet statistics) to provide visibility into traffic behavior.

You must also configure the forwarding-profile flow-profile statement at the [edit packet-forwarding-options] hierarchy level to allocate enough space in the unified forwarding table.

Default

Disabled

Options

profile profile-name Configure a profile name. You use this name in the flow-analyzer action of a firewall filter to create flows to learn and monitor.
aging-time seconds

Configure the amount of time flows can be inactive before aging out. If the aging time is changed after a flow is learned, the modified aging time is applied to both new and to existing learned flows.

  • Range: 60 to 1000000 seconds

  • Default: 60 seconds with a tolerance of 5 seconds; that is, inactive flows age out 60 and 65 seconds after becoming inactive.

Required Privilege Level

admin—To view this statement in the configuration.

admin-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Evolved Release 25.2X100-D20.