Enhancements to services interface and service set configurations: cpu-load-threshold
The cpu-load-threshold statement at the [edit interfaces interface-name service-options session-limit] hierarchy level enables you to regulate the usage of CPU resources. The cpu-load-threshold can be set as a percentage of the total available CPU resources. If the CPU usage exceeds the configured cpu-load-threshold, the system reduces the rate of new sessions so that the existing sessions are not affected by low CPU availability. The CPU utilization is constantly monitored, and if the CPU usage remains in overload state-that is, above the cpu-load-threshold value configured-for a continuous period of 5 seconds, Junos OS reduces the session rate value configured at [edit interfaces interface-name services-options session-limit rate] by 10%. This is repeated until the CPU utilization comes down to the configured limit.
You can use the show services service-sets summary, show services service-sets statistics packet-drops, and show services service-sets memory-usage commands to monitor and verify this configuration.