[j-nsp] SRX vs. SSG

[Pavel Lunin]

2010/5/10 Scott T. Cameron <routehero at gmail.com>

> On Mon, May 10, 2010 at 3:25 AM, Pavel Lunin <plunin at senetsy.ru> wrote:
>
> > Moreover SRX3/5k is quite a different story. ScreenOS products anyway can
> > not compete against them.
> >
>
> Are you speaking from experience?


Yeah. All ScreenOS products have CPU-based first packet processing. Same CPU
which does control plane. So ISG can only do 23k new sessions per second,
NS5k w/MGT3 — 26.5k. At close to 20k new cps those boxes can not do anything
else at all.

I deployed an SRX3400 with 3 SPC which did 40k new cps having ~50% SPU load
at all SPC. More than real-wrold experience.

And only NS5400 can do 2M simultaneous sessions, when SRX3400 w/3SPC can do
2.25M (it is real, I saw it myself). SRX5k can do up to 10M.

And for sure, NetScreen performance/price ratio is by far much higher.

--
Regards,
Pavel