nanog mailing list archives

Re: NAT on a Trident/Qumran(/or other?) equipped whitebox?


From: Wes Felter <wmf () felter org>
Date: Wed, 10 Oct 2018 14:18:20 -0500

On 10/9/18 10:35 AM, Jason Lixfeld wrote:
Has anyone played around with this?  Curious if the BCM (or whatever other chip) can do this, and if not, if any of the 
box vendors have tried to find a way to get these things to do a bunch of NAT - say some flavour of NAT, line-rate @ 
10G.  If so, anyone know of a NOS that has support for it?  OcNOS, Cumulus Linux, PicOS and Switch Light OS seem to 
have none, but not sure if there are others out there.

For 10G I would use software NAT like a firewall or CGN virtual appliance. Switch ASICs generally don't support NAT well; Tofino and maybe Jericho II can probably do it but at high cost and as you discovered the market isn't trying very hard to provide "routing" or "firewalling" functionality on "switching" ASICs.


Current thread: