[j-nsp] Fwd: router recommendation

Keegan Holley keegan.holley at sungard.com
Tue Oct 26 11:10:58 EDT 2010


On Tue, Oct 26, 2010 at 10:12 AM, Richard A Steenbergen <ras at e-gerbil.net>wrote:

> On Tue, Oct 26, 2010 at 11:22:26AM +0300, Miroslav Georgiev wrote:
> > Look at this:
> > J-4350
> > Firewall Performance (Large Packets): 1.6 Gbps
> > Firewall Performance (IMIX): 600 Mbps
> >
> > With some voice this router can't handle more than 350Mbps in
> packet-mode.
>
> 225kpps * 1500 bytes = 2.7Gbps.
> 225kpps * 64 bytes = 115Mbps.
>
> Or to put it another way, line rate on a GigE w/small packets is
> 1.488Mpps, of which 225kpps is only ~15%. As with any software router,
> the limitation is mostly in the lookups/sec, not the volume of traffic.
> If you don't care about high pps or predictable performance, or if you
> only have a 100Mbps uplink feeding the thing in the first place, a sw
> router may be fine. But keep in mind that a $100 linux box can put out
> 225kpps with one NIC tied behind its back, so you'd best hope you never
> get a DoS attack.
>
>
  I probably wouldn't use the J-4350 here either, but I was a little
confused by the product page.  Were those the raw packet forwarding numbers?
 I looked at the same page and I thought those were for stateful firewalling
or some other feature.


More information about the juniper-nsp mailing list