Re: vyatta for bgp

2011-09-26 Thread Ray Soucy
We service most of the state's public schools and libraries (about 1000). Historically the CPE of choice was a small Cisco ISR (1600, 1700, 1800, and 1900 most recently). As bandwidth levels went up, and Ethernet-based transport services became available, we started looking and leveraging FOSS

Re: vyatta for bgp

2011-09-26 Thread Scott Weeks
--- r...@maine.edu wrote: From: Ray Soucy r...@maine.edu We service most of the state's public schools and libraries (about 1000). Historically the CPE of choice was a small Cisco ISR (1600, 1700, 1800, and 1900 most recently). As bandwidth levels went up, and Ethernet-based transport services

Re: vyatta for bgp

2011-09-26 Thread Ray Soucy
There are a lot of variables that would skew numbers in favor of using FOSS on commodity hardware in our situation, that wouldn't necessarily apply to others. Primarily because these are used to provide services that are in part funded through the federal E-rate program, and need to comply with

Re: vyatta for bgp

2011-09-25 Thread Bill Shetti
On 9/22/11 11:38 , Charles N Wyble wrote: * On 09/22/2011 05:37 AM, Pierce Lynch wrote:** Andreas Echavez [mailto:andreas at livejournalinc.com https://mailman.nanog.org/mailman/listinfo/nanog] originally wrote:** Ultimately, the network is as reliable as you build it. With** software, it's

RE: vyatta for bgp

2011-09-22 Thread Pierce Lynch
Andreas Echavez [mailto:andr...@livejournalinc.com] originally wrote: Ultimately, the network is as reliable as you build it. With software, it's much cheaper to divide and scale horizontally. Hardware devices are expensive and usually horizontal scalability never happens. So in reality, an

Re: vyatta for bgp

2011-09-22 Thread Charles N Wyble
On 09/22/2011 05:37 AM, Pierce Lynch wrote: Andreas Echavez [mailto:andr...@livejournalinc.com] originally wrote: Ultimately, the network is as reliable as you build it. With software, it's much cheaper to divide and scale horizontally. Hardware devices are expensive and usually horizontal

Re: vyatta for bgp

2011-09-22 Thread Scott Whyte
On 9/22/11 11:38 , Charles N Wyble wrote: On 09/22/2011 05:37 AM, Pierce Lynch wrote: Andreas Echavez [mailto:andr...@livejournalinc.com] originally wrote: Ultimately, the network is as reliable as you build it. With software, it's much cheaper to divide and scale horizontally. Hardware

Re: vyatta for bgp

2011-09-21 Thread Ask Bjørn Hansen
On Sep 12, 2011, at 11:42, Ben Albee wrote: Does anybody currently use vyatta as a bgp router for their company? If so have you ran into any problems with using that instead of a cisco or juniper router? We're using Vyatta for a handful of fast ethernet links to the internet, with I think

Re: vyatta for bgp

2011-09-21 Thread Andreas Echavez
I'll chime in, In an enterprise environment, I've worked with software routers as well as hardware beasts (ala Junipers, Cisco 6500s, ASAs, and more). Ultimately, the network is as reliable as you build it. With software, it's much cheaper to divide and scale horizontally. Hardware devices are

Re: vyatta for bgp

2011-09-21 Thread Brandon Galbraith
On Wed, Sep 21, 2011 at 4:14 PM, Andreas Echavez andr...@livejournalinc.com wrote: The most reliable/cost effective solution is the cheap and redundant approach to architecture. Reliable hardware is incredibly inexpensive, and every year we get better CPUs and (recently) GPUs that are

Re: vyatta for bgp

2011-09-21 Thread Charles N Wyble
On 09/21/2011 06:14 PM, Andreas Echavez wrote: btw, you guys might find PacketShaderhttp://shader.kaist.edu/packetshader/a pretty interesting concept -Andreas Excellent! I was wondering how far along this was. Good to see. Very exciting. I've got a couple parallel systems sitting around

Re: vyatta for bgp

2011-09-15 Thread Ray Soucy
Is Vyatta really not suited for the task? I keep checking up on it and holding off looking into it as they don't support multicast yet. Modern commodity sever hardware these days often out-powers big iron enough to make up for not using ASICs, though, at least on the lower end of the spectrum.

Re: vyatta for bgp

2011-09-15 Thread Alain Hebert
Hi, As usual this end-up in what people prefer. Vyatta is as good as the hardware it runs on, the backend they use and the people configuring/maintaining it. The nature of ASIC make it more reliable than a multi-purpose device (aka server) running an OS written for it.

Re: vyatta for bgp

2011-09-15 Thread Jason Leschnik
Ray Download the Podcast The Packet Pushers - Show 31 they talk a little about this topic... If nothing else it's a great listen Cheers! On Thu, Sep 15, 2011 at 11:05 PM, Ray Soucy r...@maine.edu wrote: Is Vyatta really not suited for the task? I keep checking up on it and holding off

Re: vyatta for bgp

2011-09-15 Thread Ray Soucy
Thanks for the tip, first time I hear this podcast. On Thu, Sep 15, 2011 at 9:58 AM, Jason Leschnik lesch...@gmail.com wrote: Ray Download the Podcast The Packet Pushers - Show 31 they talk a little about this topic... If nothing else it's a great listen Cheers! On Thu, Sep 15, 2011 at

Re: vyatta for bgp

2011-09-13 Thread Tom Hill
On Mon, 2011-09-12 at 15:41 -0400, Jared Geiger wrote: There was a bug where you couldn't use two IPv4 peers and then add IPv6. I haven't tested the newest versions yet to see if it still exists. Works great for two IPv4 peers. Discussion between developers on bugfixes can often be seen in

Re: vyatta for bgp

2011-09-13 Thread Valdis . Kletnieks
On Mon, 12 Sep 2011 20:48:31 CDT, Jimmy Hess said: One thing.. the OP was asking about anyone using Vyatta for BGP. Using Vyatta for BGP doesn't necessarily mean the Vyatta unit is actually a device forwarding the packets... someone could be using it as a route server, or for otherwise

Re: vyatta for bgp

2011-09-13 Thread Valdis . Kletnieks
On Mon, 12 Sep 2011 22:38:57 BST, Nick Hilliard said: Let's throw some figures around (ridiculously simplified): a company has a choice between a pair of $10k software routers or something like a pair of MX80s for $25k each. So, one solution costs $20k; the other $50k. $30k cost difference

Re: vyatta for bgp

2011-09-12 Thread Dobbins, Roland
On Sep 13, 2011, at 1:42 AM, Ben Albee wrote: Does anybody currently use vyatta as a bgp router for their company? The days of public-facing software-based routers were over years ago - you need an ASIC-based edge router, else you'll end up getting zorched.

Re: vyatta for bgp

2011-09-12 Thread fredrik danerklint
The days of public-facing software-based routers were over years ago - you need an ASIC-based edge router, else you'll end up getting zorched. wait, what? -- //fredan

RE: vyatta for bgp

2011-09-12 Thread Michael K. Smith - Adhost
-Original Message- From: Dobbins, Roland [mailto:rdobb...@arbor.net] Sent: Monday, September 12, 2011 11:56 AM To: North American Network Operators' Group Subject: Re: vyatta for bgp On Sep 13, 2011, at 1:42 AM, Ben Albee wrote: Does anybody currently use vyatta as a bgp router

Re: vyatta for bgp

2011-09-12 Thread Nick Hilliard
On 12/09/2011 20:08, Michael K. Smith - Adhost wrote: How do you come to this conclusion? I think a software-based router for enterprise level (let's say on the 1G per provider level) can handle a fair amount of zorching. I presume by a fair amount, I presume you mean barely any? At large

Re: vyatta for bgp

2011-09-12 Thread Owen DeLong
On Sep 12, 2011, at 12:35 PM, Nick Hilliard wrote: On 12/09/2011 20:08, Michael K. Smith - Adhost wrote: How do you come to this conclusion? I think a software-based router for enterprise level (let's say on the 1G per provider level) can handle a fair amount of zorching. I presume by a

Re: vyatta for bgp

2011-09-12 Thread Dobbins, Roland
On Sep 13, 2011, at 2:45 AM, Owen DeLong wrote: In your typical enterprise environment, a 1G DoS will zorch the link long before it zorches the router at the enterprise side. This contradicts my experience - I've repeatedly witnessed only a few mb/sec of 64-byte packets making software-based

RE: vyatta for bgp

2011-09-12 Thread Chuck Church
Original Message- From: Dobbins, Roland [mailto:rdobb...@arbor.net] Sent: Monday, September 12, 2011 2:56 PM To: North American Network Operators' Group Subject: Re: vyatta for bgp zorched. --- Zorch. I like

Re: vyatta for bgp

2011-09-12 Thread Valdis . Kletnieks
On Mon, 12 Sep 2011 20:12:43 -, Dobbins, Roland said: This contradicts my experience - I've repeatedly witnessed only a few mb/sec of 64-byte packets making software-based routers fall over, including just last month. On the flip side, there's a *lot* of sites that have to make

Re: vyatta for bgp

2011-09-12 Thread Dobbins, Roland
On Sep 13, 2011, at 3:34 AM, Chuck Church wrote: Is the concern over a DDOS aimed against the router itself, or just massive flows passing through? Yes, but mainly the former. ; --- Roland Dobbins rdobb...@arbor.net //

Re: vyatta for bgp

2011-09-12 Thread Ben Albee
Thanks for the all the feed-back. We will only have two ipv4 BGP peers (both 5mb/sec links) to the same ISP. We are doing BGP because we plan to add a second ISP at one of our locations in the future. We are not any near a large enterprise, this will be replacing two DSL lines and a T1.

Re: vyatta for bgp

2011-09-12 Thread Dobbins, Roland
On Sep 13, 2011, at 3:43 AM, Everton Marques wrote: Would Cisco ISR G2 3925E classify as software-based router? Yes. Do you expect it to bend itself down under a few Mbps of 64-byte packets? Especially if they're directed at the router itself, at some point, sure - though the ISR2 certainly

Re: vyatta for bgp

2011-09-12 Thread Brent Jones
On Mon, Sep 12, 2011 at 1:52 PM, Dobbins, Roland rdobb...@arbor.net wrote: On Sep 13, 2011, at 3:43 AM, Everton Marques wrote: Would Cisco ISR G2 3925E classify as software-based router? Yes. Do you expect it to bend itself down under a few Mbps of 64-byte packets? Especially if they're

Re: vyatta for bgp

2011-09-12 Thread Dobbins, Roland
On Sep 13, 2011, at 4:13 AM, Brent Jones wrote: A high end ASIC can handle millions/tens of millions PPS, but directed to the control plane (which is often a general purpose CPU as well, Intel or PowerPC), probably not in most scenarios. CoPP.

Re: vyatta for bgp

2011-09-12 Thread Martin Millnert
Brent, On Mon, Sep 12, 2011 at 11:13 PM, Brent Jones br...@servuhome.net wrote: Lots of devices can have trouble if you direct high PPS to the control plane, and will exhibit performance degradation, leading up to a DoS eventually. That isn't limited to software based routers at all, it will

Re: vyatta for bgp

2011-09-12 Thread Jimmy Hess
On Mon, Sep 12, 2011 at 2:35 PM, Nick Hilliard n...@foobar.org wrote: I presume by a fair amount, I presume you mean barely any? At large packet sizes, an enterprise level router will just about handle a 1G DoS attack.  Thing is, bandwidth DoS / DDoS is sufficiently easy to [snip] How much

Re: vyatta for bgp

2011-09-12 Thread Tony Varriale
On 9/12/2011 3:12 PM, Dobbins, Roland wrote: On Sep 13, 2011, at 2:45 AM, Owen DeLong wrote: In your typical enterprise environment, a 1G DoS will zorch the link long before it zorches the router at the enterprise side. This contradicts my experience - I've repeatedly witnessed only a few