Services Applications
- Support for Packet Forwarding Engine DDoS protection
(QFX5220)—Starting in Junos OS Evolved Release 21.1R1, you can configure and install
policers at the Packet Forwarding Engine (PFE) level for defense from DDoS attacks. By
default, DDoS protection is enabled for many protocols on QFX5220-32CD and QFX5220-128C
switches. You can disable DDoS protection or change default policer parameters for a
protocol group or supported packet types in a protocol group. You can also configure the
bandwidth or burst limit at the protocol level.
[See Configuring Control Plane DDoS Protection Aggregate or Individual Packet Type Policers, show ddos-protection statistics, and show ddos-protection version.]