[j-nsp] Modern BGP peering border router and DDoS recommendations with Juniper?

[Erik Haagsman]

On Fri, 2005-06-10 at 21:30, Justin M. Streiner wrote:
> > I'm trying to get a handle on the Juniper platform needed to withstand a
> >
> > 1) small
> > 2) medium
> > 3) large-scale (NxGbps rate)

In terms of being DDoS-proof and near to line-rate forwarding capable,
the Ms starting at the M5 outweigh the C alternatives, but do remember
that a lot of functionality that C has in software is exclusive to
certain types of hardware with J. 
IMHO this is a good thing because it improves performance and the whole
system is less convoluted than the whole C "this IOS train with this
supervisor with this VIP with this bla bla bla will get you this" but it
also means that a lot of things you might only use now and again are
impossible without the proper (expensive) hardware.

Cheers,

Erik

-- 
---
Erik Haagsman
Network Architect
We Dare BV
tel: +31.10.7507008
fax: +31.10.7507005
http://www.we-dare.nl