[nsp] 192.168.x.y from upstream
Daniel Roesen
dr at cluenet.de
Tue Mar 11 01:56:08 EST 2003
On Mon, Mar 10, 2003 at 10:43:59PM +0100, Gert Doering wrote:
> Nah. Blaiming scaling issues to not filtering customers is just another
> form of laziness.
Tell that to the router vendors, equipping routers with too less
NVRAM for config and/or making long configs with huge prefix-lists
and ACLs (mind you, you need BOTH for BGP customers!) unmanageable.
Some downstream as-sets expand to thousands of lines of prefix-lists.
For certain vendors, you have to double that for interface ACLs.
And then talk about performance. Not all vendors and models (and
linecards, and chassis colors) do ACLs on interfaces without
performance impact, especially when the ACL becomes lengthy.
Regards,
Daniel
More information about the cisco-nsp
mailing list