[122326] in North American Network Operators' Group
Re: Linux Router distro's with dual stack capability
daemon@ATHENA.MIT.EDU (William Pitcock)
Thu Feb 11 17:12:26 2010
From: William Pitcock <nenolod@systeminplace.net>
To: Jack Carrozzo <jack@crepinc.com>
In-Reply-To: <2ad0f9f61002111005s42d62754k4f4248e7849567be@mail.gmail.com>
Date: Thu, 11 Feb 2010 16:12:03 -0600
Cc: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Hi,
On Thu, 2010-02-11 at 13:05 -0500, Jack Carrozzo wrote:
> Lots of people roll FreeBSD with Quagga/pf/ipfw for dual stack. See
> the freebsd-isp list.
FreeBSD's network stack chokes up in DDoS attacks due to interrupt
flooding. We used to use FreeBSD for firewalling and basic routing, but
when noticing that we had horizontal scalability (e.g. a Celeron 667mhz
performed nearly as well as a dual dual-core Xeon system when DDoS
attacks happened), we switched to Vyatta, and generally have not looked
back.
William
