[c-nsp] 2821, 2851, 3825, 3845 benchmarks or lack thereof.

[Łukasz Bromirski]

Rubens Kuhl Jr. wrote:

> According to that Cisco document, yes. They calculated 87 Mbps with
> 64-byte packets, but based on pps numbers with no features.
> Unfortunately, they don't mention process switching performance for
> theses models, which you could use for a worst case
> router-under-attack scenario.

ISRs support control-plane policing[1] right from first IOS release,
which effectively defends router itself from any (D)DoS attacks.
Most of the functionality is fast/CEF-switched anyway.

[1].
Configuration:
http://www.cisco.com/en/US/products/ps6350/products_configuration_guide_chapter09186a00804559b7.html
Deploying:
http://www.cisco.com/en/US/products/ps6642/products_white_paper09186a0080211f39.shtml

-- 
this space was intentionally left blank    |            Łukasz Bromirski
you can insert your favourite quote here   |        lukasz:bromirski,net