There are a "lot of routers suitable for a 1Gbps link", depending on your definition of suitable.
Most of which, in the wisp space, would "eat shit" (technical term) far below 1Mpps with 150B packets. It also depends on configuration. Let's take a MikroTik RB3011UiAS-RM for example. It claims it can do 1.5Mpps with fastpath bridging, and 1.4Mpps routing.. both specs pulled from the 64B listings here: https://mikrotik.com/product/RB3011UiAS-RM Assuming the router has a couple of ip filters or firewall rules on it, it probably could only handle a couple hundred kpps at 150B packet size. You can look at some of the other tables for examples to ballpark their performance under that type of load. It also depends on the type of attack... some of the reflection attacks might have that kind of inbound flood, but outbound could be trying to go far higher than even 1Mpps if not limited by the hardware on that improperly configured device (ie: secure your stuff people). On Tue, Nov 14, 2017 at 7:00 PM, Zach Underwood <[email protected]> wrote: > I guess I was hoping to get a better understanding of that pps level would > cause the average router some one would have on a 1gbit link. Is that 50k > pps, 100k pps or more. > > Zach Underwood (RHCE,RHCSA,RHCT,UACA) > > http://ZachUnderwood.me > > advance-networking.com > > > > On Nov 14, 2017 7:13 PM, "Paul Stewart" <[email protected]> wrote: > > Not sure specific to ubnt routers – depends on how they handle exception > traffic like that …. > > > > But what I would suggest is when reading specs on routers, try to get real > world feedback as it seems you are asking for.. Many spec sheets on routers > have PPS ratings for IMIX traffic or large packets – small packets millions > at a time are a whole different story ;) > > > > Paul > > > > > > From: Af <[email protected]> on behalf of Zach Underwood > <[email protected]> > Reply-To: <[email protected]> > Date: Tuesday, November 14, 2017 at 4:32 PM > To: <[email protected]> > Subject: [AFMUG] PPS limits > > > > I am trying to put some ddos attacks in perspective in terms of pps. > > > > Here are two examples > > 545.4 Mbps/2.4 Mpps udp packet size less than 150byte > > 2.0 Gbps/8.5 Mpps udp packet size less than 150byte > > > > What size router would fall over with 1+ Mpps of traffic. > > example ubnt ER-8 clams 2Mpps. > > > > > -- > > Zach Underwood (RHCE,RHCSA,RHCT,UACA) > > My website > > advance-networking.com > >
