[j-nsp] SRX hardware acceleration caveats
Benny Amorsen
benny+usenet at amorsen.dk
Sun Jun 17 09:53:54 EDT 2012
Thank you very much again. "No fragmentation" is a potential DoS vector
but probably ok. The other limitations are similar to other vendors.
However, "No IPv6" is really unfortunate. With Google, Youtube and
Facebook on IPv6 already, that could be a serious limitation.
It is pretty sad that when it comes to >1Gbps firewalling, CNG is
cheaper and easier to buy than native IPv6...
/Benny
More information about the juniper-nsp
mailing list