nanog mailing list archives
Re: image stream routers
From: Jon Lewis <jlewis () lewis org>
Date: Sat, 17 Sep 2005 18:21:22 -0400 (EDT)
On Sat, 17 Sep 2005, tony sarendal wrote:
... until you get an inbound ddos over that shiny gige at 1.44 Mpps. in today's world, planning for normal circumstances is woefully insufficient, you have to spec based on worst case numbers because you're almost guaranteed they will hit your network upside the head in the future.If I have a GE link and get DDOS'ed at 1.44Mpps I'm on the wrong side of the bottleneck to do much about it, am I not ?
The difference is with a software based router that melts under DDoS traffic, the CLI may become unusable and it may be dropping so many packets, that if you're on the outside, you can't get in to manage it or anything else on the network. With a hardware based router that can handle one or more orders of magnitude more PPS that a DDoS generates, the CLI keeps working as if nothing's wrong, and if you happen to be on the outside trying to get in to manage things, you may suffer a little packet loss if your transit pipes are full, but nothing compared to the first case.
---------------------------------------------------------------------- Jon Lewis | I route Senior Network Engineer | therefore you areAtlantic Net | _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________
Current thread:
- Re: Quality of User Experience (was RE: image stream routers), (continued)
- Re: Quality of User Experience (was RE: image stream routers) Lincoln Dale (Sep 17)
- Re: Quality of User Experience (was RE: image stream routers) Valdis . Kletnieks (Sep 17)
- Re: Quality of User Experience (was RE: image stream routers) Randy Bush (Sep 17)
- Re: image stream routers tony sarendal (Sep 17)
- Re: image stream routers sthaug (Sep 17)
- Re: image stream routers tony sarendal (Sep 17)
- Re: image stream routers tony sarendal (Sep 17)
- Re: image stream routers Paul G (Sep 17)
- Re: image stream routers Deepak Jain (Sep 17)
- Re: image stream routers tony sarendal (Sep 17)
- Re: image stream routers Jon Lewis (Sep 17)
- Re: image stream routers sthaug (Sep 17)
- Re: image stream routers Edward B. Dreger (Sep 17)
- Re: image stream routers Edward B. Dreger (Sep 17)
- Re: image stream routers Lincoln Dale (Sep 17)
- Re: image stream routers Dan Hollis (Sep 17)
- Re: image stream routers Lincoln Dale (Sep 17)