[c-nsp] Sup720 CoPP, limits on CPU performance

[Dobbins, Roland]

On Mar 24, 2010, at 5:30 PM, Phil Mayers wrote:

> I've just realised I've been suckered into an ideological sub-thread, rather than technical. 

There's nothing ideological about it - it's simply my contention that it's *technically and operationally* a lot easier to implement iACLs in many cases than to implement CoPP, thus making it *technically and operationally* easier to protect one's own network infrastructure.

I don't think CoPP is a Bad Thing; on the contrary, I think it's a Good Thing.  However, I think that folks are expending a lot more effort and taking far longer to (and in some cases, failing to) secure their networks because they think CoPP is the only way to do so.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

    Injustice is relatively easy to bear; what stings is justice.

                        -- H.L. Mencken