[58992] in North American Network Operators' Group
Re: High Speed IP-Sec
daemon@ATHENA.MIT.EDU (Richard A Steenbergen)
Mon Jun 9 19:12:09 2003
Date: Mon, 9 Jun 2003 19:09:42 -0400
From: Richard A Steenbergen <ras@e-gerbil.net>
To: nanog@merit.edu
In-Reply-To: <20030609200318.GA8113@ussenterprise.ufp.org>
Errors-To: owner-nanog-outgoing@merit.edu
On Mon, Jun 09, 2003 at 04:03:18PM -0400, Leo Bicknell wrote:
>
> I'm looking for a high speed (300-1000Mbps) IPSec solution. I need
> basic functionality only, a frame in one side pops out the other
> side. For the moment I don't care if this is a layer 2 or a layer
> 3 device. For the application in mind it's just between two points.
>
> I need a supported product, not some home-grown set of bits, and
> cost is the major factor. Most units at this speed do a lot of
> other stuff (firewall features, vpn clients, ids, other junk), and
> cost a lot of money as a result. Since there are FreeBSD/Linux
> boxes getting close to that throughput with accelerator cards I
> figure someone has to make the stripped down solution for a reasonable
> price.
>
> Any pointers welcomed.
http://www.juniper.net/products/ip_infrastructure/modules/100048.html#02
The PIC isn't exactly cheap, but it's pretty well supported, and the rest
of the routers aren't too bad on the used market.
--
Richard A Steenbergen <ras@e-gerbil.net> http://www.e-gerbil.net/ras
GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)
