nanog mailing list archives
Re: nexus N3K-C3064PQ vs juniper ex4500 in order to protect against ddos
From: Matt Freitag <mlfreita () mtu edu>
Date: Fri, 30 Sep 2016 16:50:25 -0400
Pedro, Please also keep in mind that the Juniper EX4500 is an end of life product. Soon you won't be able to get Juniper to support you. That's why there are so many for so cheap on eBay. Matt Freitag Network Engineer I Information Technology Michigan Technological University (906) 487-3696 <%28906%29%20487-3696> https://www.mtu.edu/ https://www.it.mtu.edu/ On Fri, Sep 30, 2016 at 4:06 PM, Saku Ytti <saku () ytti fi> wrote:
On 30 September 2016 at 22:42, Pedro <piotr.1234 () interia pl> wrote: Hey Pedro,I have some idea to put switch before bgp router in order to terminateisp10G uplinks on switch, not router. Main reason is that could be somekind of1st level of defence against ddos, second reason, less important, savecostof router ports, do many port mirrors.I don't understand your rationale, unless your router is software box, but as it has 10G interface, probably not. Your router should be able to limit packets in HW, likely with better counter and filtering options than cheap switch. -- ++ytti
Current thread:
- nexus N3K-C3064PQ vs juniper ex4500 in order to protect against ddos Pedro (Sep 30)
- Re: nexus N3K-C3064PQ vs juniper ex4500 in order to protect against ddos Saku Ytti (Sep 30)
- Re: nexus N3K-C3064PQ vs juniper ex4500 in order to protect against ddos Matt Freitag (Sep 30)
- Re: nexus N3K-C3064PQ vs juniper ex4500 in order to protect against ddos Saku Ytti (Sep 30)