Profile-capped mode enforces an overall inplus-profile and in-profile burst limit to the CIR bucket for the following packet types:
ingress undefined
ingress explicit in-profile
egress soft-in-profile
egress explicit inplus
egress explicit in-profile
The default behavior when profile-capped mode is not enabled is to ignore the CIR output state when an explicit inplus-profile (egress only) and in-profile packet is handled by an ingress or egress policer. The explicit in-profile packets consume CIR tokens up to two times the CBS at which point the bucket stops incrementing and the CIR output for that type of packet enters the non-conforming state. However, the non-conforming state is ignored by the forwarding plane and the packet continues to be handled as inplus-profile or in-profile. Therefore, the total amount of inplus-profile or in-profile traffic can be greater than the configured CIR.
The profile-capped mode makes two changes:
At egress, soft-in-profile packets (packets received at ingress as in-profile) are treated the same as explicit in-profile packets (unless explicitly reclassified as out-of-profile) and have an initial policer state of in-profile.
At both ingress and egress, any packets output from the policer with a non-conforming CIR state are treated as out-of-profile (out-of-profile state is ignored for initial in-profile packets when profile-capped mode is not enabled).
A profile-capped policer trusts the in-profile state determined at ingress classification or egress reclassification, so the initial in-profile traffic is preferentially handled with the CIR bucket (two times the CBS instead of CBS used by undefined or soft-out-of-profile traffic) and the total amount of inplus-profile or in-profile traffic output by the policer cannot exceed the CIR (including initial in-profile traffic).
Profile-capped mode has an effect on stat-mode behavior. Each stat mode has a fixed number of counters in the forwarding plane. The mapping of packets to a counter is also fixed by the offered packet state (profile inplus, profile in, profile out, undefined, soft-in-profile and soft-out-of-profile) in conjunction with the output state of the policer. In the non-capped mode, soft-in-profile is considered undefined while in capped mode it is considered to be equivalent to profile in. Another potential issue with ingress and egress stat-modes is the fact that green packets (that is, those that are profile in at ingress and egress, or soft-in-profile at egress) can turn yellow in the policer output.
Table: Effect of profile-capped mode on CIR output describes how the CIR rate and initial profile of each packet affects the output of normal (non-profile-capped) and profile-capped mode policers.
| CIR setting | Initial profile state | Normal mode | Profile-capped mode | Notes |
|---|---|---|---|---|
CIR=0 |
Ingress undefined |
Always out-of-profile |
Always out-of-profile |
When CIR = 0, the CIR has no effect on the packet profile except for ingress-undefined packets. If profile-capped is used, this forces all packets to be out-of-profile except for those explicitly reprofiled to exceed-profile. |
Ingress profile in |
Always in-profile |
Always out-of-profile |
||
Ingress profile out |
Always out-of-profile |
Always out-of-profile |
||
Egress soft-in-profile |
Always in-profile |
Always out-of-profile |
||
Egress soft-out-of-profile |
Always out-of-profile |
Always out-of-profile |
||
Egress profile inplus |
Always inplus-profile |
Always out-of-profile |
||
Egress profile in |
Always in-profile |
Always out-of-profile |
||
Egress profile out |
Always out-of-profile |
Always out-of-profile |
||
Egress profile exceed |
Always exceed-profile |
Always exceed-profile |
||
CIR=Max/PIR |
Ingress undefined |
Always in-profile |
Always in-profile |
CIR never reaches non-conforming state. |
Ingress profile in |
Always in-profile |
Always in-profile |
||
Ingress profile out |
Always out-of-profile |
Always out-of-profile |
||
Egress soft-in-profile |
Always in-profile |
Always in-profile |
||
Egress soft-out-of-profile |
Always in-profile |
Always in-profile |
||
Egress profile inplus |
Always inplus-profile |
Always inplus-profile |
||
Egress profile in |
Always in-profile |
Always in-profile |
||
Egress profile out |
Always out-of-profile |
Always out-of-profile |
||
Egress profile exceed |
Always exceed-profile |
Always exceed-profile |
||
0 < CIR < PIR |
Ingress undefined |
In-profile below CBS Out-of-profile at or above CBS |
In-profile below CBS Out-of-profile at or above CBS |
|
Ingress profile in |
Always in-profile |
In-profile below two times CBS Out-of-profile at or above two times CBS |
||
Ingress profile out |
Always out-of-profile |
Always out-of-profile |
||
Egress soft-in-profile |
In-profile below CBS Out-of-profile at or above CBS |
In-profile below two times CBS Out-of-profile at or above two times CBS |
||
Egress soft-out-of-profile |
In-profile below CBS Out-of-profile at or above CBS |
In-profile below CBS Out-of-profile at or above CBS |
||
Egress profile inplus |
Always inplus-profile |
Inplus-profile below two times CBS Out-of-profile at or above two times CBS |
||
Egress profile in |
Always in-profile |
In-profile below two times CBS Out-of-profile at or above two times CBS |
||
Egress Profile Out |
Always Out-of-profile |
Always Out-of-profile |
||
Egress Profile Exceed |
Always Exceed-profile |
Always Exceed-profile |