Re: [j-nsp] polishing an antique m7i

2022-07-07 Thread Randy Bush via juniper-nsp
>> - old m7i with RE-B-1800X1-4G-S >> - currently running 14.2R7.5 >> - hard disk dying >> - have nice new 1tb sata ssd for it >> - juniper support download is pushing 15.1R7.9 at me >> - should i worry about increased memory use or license changes in 15? >> - if so, where the heck is 14? > > If

Re: [j-nsp] polishing an antique m7i

2022-07-07 Thread Mark Tinka via juniper-nsp
On 7/2/22 20:00, Randy Bush via juniper-nsp wrote: - old m7i with RE-B-1800X1-4G-S - currently running 14.2R7.5 - hard disk dying - have nice new 1tb sata ssd for it - juniper support download is pushing 15.1R7.9 at me - should i worry about increased memory use or license changes in 15? - if

Re: [j-nsp] SRTBH

2022-07-07 Thread Jeff Haas via juniper-nsp
In circumstances where the routing table can help you mitigate an attack, including things that use uRPF, it'll usually scale significantly better that flowspec. This is primarily because flowspec is just a distributed way of programming the firewall, and firewalls on transit routers have many

Re: [j-nsp] SRTBH

2022-07-07 Thread Gert Doering via juniper-nsp
Hi, On Thu, Jul 07, 2022 at 08:41:56AM -0400, harbor235 via juniper-nsp wrote: > Since Flowspec arrived, are there any uses for SRTBH? Scaling? My understanding of flowspec is that it is typically implemented by programming ACL TCAM, while SRTBH is routing table lookup, so "some 10.000 lines"

[j-nsp] SRTBH

2022-07-07 Thread harbor235 via juniper-nsp
Since Flowspec arrived, are there any uses for SRTBH? Anyone using TrinityCyber, them use a different approach to IDS and is not strictly signature based but more TTPs? Write up appear to be good, curious if anyone is using their products? Mike ___