[c-nsp] SUP720's memory, looking at options..

Gert Doering gert at greenie.muc.de
Wed Jul 6 03:21:04 EDT 2016


On Tue, Jul 05, 2016 at 09:26:39PM +0000, Mack McBride wrote:
> For an IX, you might be better off with something like a white box switch running custom code.

Well, I'm not the IX operator, I'm just a participant - and it's tremendously
helpful to know for sure *who* is sending you that extra 10G traffic that
is filling your link with spoofed-source traffic -> read: some sort of MAC
referencing (MAC acct or netflow-with-MAC) is needed.

People have suggested using passive fiber TAPs and offload MAC acct to
a PC, but that's totally non-scalable when you go to multi-10G connections...

(Other vendors do not particularily excel in this space either)

USENET is *not* the non-clickable part of WWW!
Gert Doering - Munich, Germany                             gert at greenie.muc.de
fax: +49-89-35655025                        gert at net.informatik.tu-muenchen.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 291 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/cisco-nsp/attachments/20160706/003c1c9b/attachment.sig>

More information about the cisco-nsp mailing list