Policing network traffic on interfaces across multiple processing elements

A network device comprising:

• first and second ports that at least partly form a logical interface;
• a first packet processing element coupled to the first port;
• a second packet processing element coupled to the second port;
• memory circuitry;
• and
• processing circuitry coupled to the memory circuitry and configured to:
• apply a traffic policy that specifies a traffic-limiting rate to the logical interface;
• obtain a first processing-element-specific traffic-limiting rate for the first packet processing element based on the traffic-limiting rate for the logical interface and based on a configuration of the logical interface relative to the first packet processing element;
• and
• obtain a second processing-element-specific traffic-limiting rate for the second packet processing element based on the traffic-limiting rate for the logical interface and based on a configuration of the logical interface relative to the second packet processing element, wherein the first processing-element-specific traffic-limiting rate is obtained based on a ratio of a number of ports coupled to the first packet processing element that at least partly forms the logical interface to a total number of ports forming the logical interface and wherein the second processing-element-specific traffic-limiting rate is obtained based on a ratio of a number of ports coupled to the second packet processing element that at least partly forms the logical interface to the total number of ports forming the logical interface.

One or more non-transitory computer-readable storage media comprising computer-executable instructions that, when executed by one or more processors in a network device, cause the one or more processors to:

• obtain a traffic policy that polices traffic for a logical interface formed from underlying physical interfaces, wherein the traffic policy identifies an overall traffic rate for rate-limiting the traffic received for the logical interface;
• obtain first and second packet-processing-element-specific policer profiles for first and second packet processing elements, respectively, by
• determining, for the first packet-processing-element-specific policer profile, a first traffic rate for rate-limiting a first portion of the traffic received for the logical interface by the first packet processing element based on the overall traffic rate and based on a number of the underlying physical interfaces forming the logical interface and coupled to the first packet processing element, and
• determining, for the second packet-processing-element-specific policer profile, a second traffic rate for rate-limiting a second portion of the traffic received for the logical interface by the second packet processing element based on the overall traffic rate and based on a number of the underlying physical interfaces forming the logical interface and coupled to the second packet processing element, wherein the first and second traffic rates are each less than the overall traffic rate identified by the traffic policy;
• and
• configure the first and second packet processing elements to police the traffic based on the first and second packet processing elements specific policer profiles, respectively.