CoPP — Protecting the CPU That Protects Everything

Packets destined to the router (OSPF, BGP, SSH, SNMP, ARP, ICMP-to-interface) get punted to the CPU. Without protection, one ICMP flood overloads the CPU, adjacencies flap — data plane healthy, network dead. CoPP rate-limits the punts. Only protects traffic addressed to the device. Transit traffic is not CoPP’s job. Implements as plain MQC: named ACLs […]