On Jan 6, 2011, at 11:16 AM, Randy Bush wrote: > actually, the formal rpki-based origin-validation stuff is measured to take > *less* cpu, a lot less, than ACLs
On the platforms which really matter in terms of rPKI, ACLs are handled in hardware, so this is pretty much a wash. Concur on all the other points, however. ------------------------------------------------------------------------ Roland Dobbins <rdobb...@arbor.net> // <http://www.arbornetworks.com> Most software today is very much like an Egyptian pyramid, with millions of bricks piled on top of each other, with no structural integrity, but just done by brute force and thousands of slaves. -- Alan Kay
