[f-nsp] Brocade IPSEC modules

Eldon Koyle ekoyle+puck.nether.net at gmail.com
Tue Aug 16 02:09:20 EDT 2016


I noticed it while browsing through the available code versions.  I was
curious because I have been bitten a lot lately by features/hardware that
are "supported", but only in code versions your SE will encourage you not
to run.

Another example, the ICX64xx line will not run code past 08010, but the
models to replace them will not run code older than 08030.  I understand
that they can't support code forever (unless it's an MLX, apparently), but
this is the first time I can't do a graceful transition from one model to
the next without worrying about unexpected changes in behavior; and the ICX
was (is?) less than 5 years old when they made that decision.

I'm starting to feel like I need a support group.

-- 
Eldon

On Aug 15, 2016 11:47 PM, "Michael Gehrmann" <mgehrmann at atlassian.com>
wrote:

> Good point Eldon, I didn't find that reference.
>
> Not likely to want to risk the new code.
>
> On 16 August 2016 at 15:39, Eldon Koyle <ekoyle+puck.nether.net at gmail.com>
> wrote:
>
>> One other thing to consider carefully is what code version are you
>> required to run to support that line card and are you ready to upgrade past
>> the "target path" which is still 5.6h .  It looks like 5.9bd is the minimum
>> version for ipsec, and 6.0 is the current alpha... err... latest release.
>>
>> Still too new for me.  Their confidence in their own code inspires
>> confidence, don't you think?
>>
>> --
>> Eldon
>>
>> On Aug 15, 2016 4:21 PM, "Michael Gehrmann" <mgehrmann at atlassian.com>
>> wrote:
>>
>>> I agree Eldon. It is pretty steep for a single purpose "one trick pony"
>>> card.
>>>
>>> On 16 August 2016 at 00:32, Eldon Koyle <ekoyle+puck.nether.net at gmail.
>>> com> wrote:
>>>
>>>> I'm still trying to recover from the sticker shock.  They only have one
>>>> option for ipsec, a 4-port 10g card that lists for $120k in the US.
>>>>
>>>> --
>>>> Eldon
>>>>
>>>> On Aug 14, 2016 22:21, "Michael Gehrmann" <mgehrmann at atlassian.com>
>>>> wrote:
>>>>
>>>>> Has anyone experienced/used the IPSEC modules for MLX or the like?
>>>>>
>>>>> Good/Bad/Ugly?
>>>>>
>>>>> --
>>>>> Michael Gehrmann
>>>>>
>>>>>
>>>>> _______________________________________________
>>>>> foundry-nsp mailing list
>>>>> foundry-nsp at puck.nether.net
>>>>> http://puck.nether.net/mailman/listinfo/foundry-nsp
>>>>>
>>>>
>>>
>>>
>>> --
>>> Michael Gehrmann
>>> Senior Network Engineer - Atlassian
>>> m: +61 407 570 658
>>>
>>
>
>
> --
> Michael Gehrmann
> Senior Network Engineer - Atlassian
> m: +61 407 570 658
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/foundry-nsp/attachments/20160816/b981de79/attachment.html>


More information about the foundry-nsp mailing list