erspan hardware or software only?

  • 1
  • Question
  • Updated 2 years ago
erspan hardware or software only?
from config guide, it look like are a iptables entry, I wonder if there is hardware acceleration under the hood?
Photo of Eric Dong

Eric Dong

  • 762 Points 500 badge 2x thumb

Posted 2 years ago

  • 1
Photo of Sean Cavanaugh

Sean Cavanaugh, Alum

  • 3,360 Points 3k badge 2x thumb
The SPAN and ERSPAN are hardware accelerated by using the cl-acltool. It pushes all rules (by default) that are stored under /etc/cumulus/acl/policy.d/.rules. This will capture all traffic (both data plane and control plane) which differes from just tcpdumping a swp which will only show control plane (e.g. OSPF hello pkt)
Photo of Pete B

Pete B, Official Rep

  • 2,774 Points 2k badge 2x thumb
Think this is worth mentioning in the docs, Sean?