[127772] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Vyatta as a BRAS

daemon@ATHENA.MIT.EDU (Dobbins, Roland)
Tue Jul 13 22:18:41 2010

From: "Dobbins, Roland" <rdobbins@arbor.net>
To: NANOG list <nanog@nanog.org>
Date: Wed, 14 Jul 2010 02:18:18 +0000
In-Reply-To: <7D84DDA7-1ACD-42D4-94B8-F0E95165731F@tony.li>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org


On Jul 14, 2010, at 3:26 AM, Tony Li wrote:

> The whole point about being DoS resistant is one of horsepower.  To do Do=
S protection correctly, you need to be able to do packet examination at lin=
e rate.

Right.  And to date, such routers make use of ASICs - i.e., 'hardware-based=
' routers, in the vernacular. =20

Routers which use only centralized, general-purpose processors can't handle=
 even a fraction of 'line-rate' without tanking, as innumerable real-world =
examples of said behavior over the years have repeatedly and conclusively d=
emonstrated.

;>

-----------------------------------------------------------------------
Roland Dobbins <rdobbins@arbor.net> // <http://www.arbornetworks.com>

    Injustice is relatively easy to bear; what stings is justice.

                        -- H.L. Mencken





home help back first fref pref prev next nref lref last post