Traffic shaping on juniper virtual-router

Question

I have created a virtual routing instance allow traffic to be transmitted over private IP space:

static-cust-inet {
    description "Virtual Routing Instance";
    instance-type virtual-router;
    interface ge-1/1/3.5312;
    interface ge-1/1/3.5324;
    routing-options {
        static {
            route 10.0.0.0/24 next-hop 172.30.212.2;
            route 192.168.0.0/24 next-hop 172.30.211.2;
        }
    }
}

Applying a filter to the interfaces specified there doesn't work. How would I do it in this situation? This is the policer I want to apply is like this:

if-exceeding {
    bandwidth-limit 10m;
    burst-size-limit 1m;
}
then discard;

The firewall filter is specified under the "firewall family inet" hierarchy level. Is that the correct place?

Answer 1

Here's how we do this on an MX80. Important to understand that policing is ingress (drops traffic if metrics are exceeded and can also cause lots of problems with TCP if the remote end isn't shaping toward you) and shaping is egress (which is queued and plays nicely with TCP by default).

I have to admit though that I'm not certain if the syntax with a VRI would be different:

class-of-service {
    interfaces {
         {
            unit "vlan_id" {
                shaping-rate "shaping_rate";
            }
        }
    }
}


Example:
class-of-service {
    interfaces {
        xe-1/2/0 {
            unit 948 {
                shaping-rate 500m;
            }
        }
    }
}