[c-nsp] Smallest router that supports GigE over MM fibre

[Andris Zarins]

Here is small fragment from Miercom test report, done on Apr.2005
http://www.miercom.com/dl.html?fid=20040903&type=report


2811 Router's Max Firewall Throughput
Separately, we ran a "bench" test to see how much data the 2811 could route under ideal circumstances. Set-up: single, bi-directional UDP flow between two 10/100 ports, big (1,460-byte) packets, with firewall and NAT running and a logging turned on. Using Spirent Smart-Flow v4.0 we saw 130 Mbps total. 

This is about 2811 box. Besides there was firewall and NAT running. I have done similar tests with 2821 (without firewall) and I have no reason not to believe Miercom.

Below is same test report fragment, about 2851 box

2851 Router's Max Firewall Throughput
Separately, we ran a "bench" test to see how much data the 2851 could route under ideal circumstances. Set-up: a single, bi-directional UDP flow between two Gigabit ports, big (1,460-byte) packets, and with firewall and NAT running and logging turned on. Using Spirent Smart-Flow v4.0, we saw over 534 Mbps total. Not a typical environment, but worth noting.

Comoon guys .. 200mbit will not  be a problem. 

AZ


-----Original Message-----
From: Kristofer Sigurdsson [mailto:kristo at ipf.is] 
Sent: Friday, September 30, 2005 1:26 PM
To: Gert Doering
Cc: Andris Zarins; Vincent De Keyzer; cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] Smallest router that supports GigE over MM fibre

On Fri, 2005-09-30 at 12:30 +0200, Gert Doering wrote:
> Hi,
> 
> On Fri, Sep 30, 2005 at 09:46:38AM +0000, Kristofer Sigurdsson wrote:
> > A 2821 *will not* route 200 Mbit/s.  You might be able to squeeze that 
> > out of a 2851, but it would be at 100% CPU load.  
> 
> The router performance PDF claims 87 Mbit/s. for the 2821 and 112 Mbit/s.
> for the 2851 - but that's for 64 byte packets.  So if your packets are
> larger ("internet standard mix") both routers will do 200 Mbit/s.

Those numbers assume 100% CPU load, no access lists, no routing 
protocols, no nothing.  I'm assuming if the switch does not satisfy his
needs, he will be using some of the extra knobs in "real" routers, and
that he wants to be able to monitor/administer the box...

Also, IMHO, it is generally bad practise to run routers at 90%+ 
constant load...

> 
> OTOH if you have to calculate DoS attacks, virus outbreaks, etc. into
> the mix, and want a router that can do 200 Mbit/s. under worst-case
> conditions, you'll need at least a 3845 (which the performance PDF claims
> to be faster than a NPE-400).

I agree.  The 3845 or the NPE-400 should do nicely, IMHO, assuming a
"standard" environment and not overly excessive virus outbreaks and/or
DDoS attacks (if you happen to get a lot of those, you will have to 
choose equipment in accordance with that).

-- 
Kristófer Sigurðsson           Tel: +354 414 1600
Netrekstur/Network Operations  IP Fjarskipti ehf.