[c-nsp] 2851 throughput / guidance

[Church, Chuck]

Is the IPS being down with the IPS module, or by the router CPU itself?
That seems like it'd be a CPU killer if anything would be.  From what
the performance doc says for process and fast switched pps, the 2851 is
pretty close to an NPE-225.  If you equate CPU power to process-switched
PPS, the 2851 should be a little faster than a 3660.  

Chuck 
 

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Matthew Marlowe
Sent: Tuesday, February 27, 2007 8:59 PM
To: Alex Campbell; cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] 2851 throughput / guidance


>> 
>> About 95% of the traffic through the devices will be HTTP and HTTPS,
>> probably in the 10mbps - 30mbps range.  The 2851s wouldn't be a
really
>> long term solution, and once we start to hit the 70-90mbps range we
>> would be ready to replace them with something much bigger.
>> 

Are you really going to be able to get 70-90Mbps through
the 2851 w/ non-trivial acls + CBAC enabled?

We have a 3845 w/ CBAC/IPS/QoS enabled and I'd be happy
if it even supports 100Mbps.  The cisco performance docs say
we'll get somewhere between 45Mbps to 256Mbps performance
depending on what features are enabled on the 3845.
Currently we see about .8% cpu util per Mbps.

If I remember, the 3845 has about twice the cpu of the 2851.
I wouldn't plan on being able to get more than 50Mbps on a 2851
in a reasonable hosting provider configuration.

Regards,
Matt
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/