[j-nsp] SRX hardware acceleration caveats

Benny Amorsen benny+usenet at amorsen.dk
Sun Jun 17 09:53:54 EDT 2012


Thank you very much again. "No fragmentation" is a potential DoS vector
but probably ok. The other limitations are similar to other vendors.

However, "No IPv6" is really unfortunate. With Google, Youtube and
Facebook on IPv6 already, that could be a serious limitation.

It is pretty sad that when it comes to >1Gbps firewalling, CNG is
cheaper and easier to buy than native IPv6...


/Benny



More information about the juniper-nsp mailing list