nanog mailing list archives
Re: [c-nsp] DNS amplification
From: David Conrad <drc () virtualized org>
Date: Tue, 19 Mar 2013 12:24:34 -0700
Leo, On Mar 19, 2013, at 11:57 AM, Leo Bicknell <bicknell () ufp org> wrote:
In a message written on Tue, Mar 19, 2013 at 11:33:33AM -0700, David Conrad wrote:LISP doesn't replace BGP. It merely adds a layer of indirection so you don't have to propagate identity information along with routing topology, allowing much greater aggregation.The problem with LISP is that when the complexity of the entire system is taken into account it is not signficantly more efficient than the current system.
When was the last time you (as a network operator) cared about the efficiency of the entire system? LISP (and similar) system are inherently more complex because they're adding a new element to the network -- TANSTAAFL. The point is that the complexity is added at the edge where it is easy/cheap (per node or site). Yes, entire system complexity goes up. However from the perspective of the core where life is fast/expensive, complexity goes down since identity is separated from location.
A LISP network is a similar model, with LISP nodes caching rather than linecards.
You're comparing the equivalent of a DNS lookup with a FIB lookup. Yes, there is a performance hit when you do the mapping of identity to location (TANSTAAFL), however this is at the edge in the millisecond DRAM-stored connection initiation world, not in the core in the nanosecond SRAM-stored packet forwarding world. Regards, -drc
Current thread:
- Re: routing table go boom, (continued)
- Re: routing table go boom William Herrin (Mar 19)
- Re: [c-nsp] DNS amplification David Conrad (Mar 19)
- Re: [c-nsp] DNS amplification Christopher Morrow (Mar 19)
- Re: [c-nsp] DNS amplification David Conrad (Mar 19)
- Re: [c-nsp] DNS amplification Christopher Morrow (Mar 19)
- Re: [c-nsp] DNS amplification Doug Barton (Mar 19)
- Re: [c-nsp] DNS amplification Patrick W. Gilmore (Mar 19)
- Re: [c-nsp] DNS amplification David Conrad (Mar 19)
- Re: [c-nsp] DNS amplification Leo Bicknell (Mar 19)
- Re: [c-nsp] DNS amplification Dobbins, Roland (Mar 19)
- Re: [c-nsp] DNS amplification David Conrad (Mar 19)
- Re: [c-nsp] DNS amplification Leo Bicknell (Mar 19)
- Re: [c-nsp] DNS amplification Christopher Morrow (Mar 19)
- Re: [c-nsp] DNS amplification Dobbins, Roland (Mar 19)
- Re: [c-nsp] DNS amplification Dobbins, Roland (Mar 19)
- RE: [c-nsp] DNS amplification Adam Vitkovsky (Mar 20)
- Re: [c-nsp] DNS amplification Randy Bush (Mar 19)
- Re: [c-nsp] DNS amplification Arturo Servin (Mar 20)
- Re: [c-nsp] DNS amplification Aled Morris (Mar 20)
- Re: [c-nsp] DNS amplification Arturo Servin (Mar 20)
- Re: [c-nsp] DNS amplification David Conrad (Mar 20)