I don't understand the logic behind dual PSU's that aren't hot-swappable.looks like a new revision of ccr1036 is coming soon
with dual PSU
RP filter in this case doesn't make any difference. But route cache does.
With disabled route cache:
blackhole = 4.45Mil pps
raw drop = 4.2Mil pps
Hi mrz,I would suggest to use raw firewall rules to drop DDOS packets.