Hi, On Fri, Feb 15, 2013 at 01:41:20AM +1100, Andrew Miehs wrote: > I guess the word "trust" was probably a poor choice in the case of BGP. > > Its more a case of which do you believe has a buggier implementation - the > firewall vendor with BGP/ routing protocol or Cisco with VSS. Which is more > likely to break?
VSS
Cisco has lost lots of trust regarding OS quality control, modularity of
code, or general "someone knows which way the company wants to move" in
the last years. I can accept single boxes crashing, which is why I have
two of them - and they do not (never ever if I can avoid it) run the same
version of IOS. So if something critical in SXI will bring down box #1,
the other will be on SXJ (or SXH, or maybe 15.2S) and will not die in
concert.
> I had an issue last week with one vendor where OSPF between a firewall, and
> a switch broke, causing the firewall to loose some specific routes for a
> short amount of time.
Given the track record of weird bugs in Cisco's OSPFv3 implementation, I
came to the conclusion that getting OSPF right seems to be hard. So I would
never run OSPF to a firewall, if I could do BGP instead.
(Just look at quagga/zebra - their BGP code is reasonable, their OSPF ... not)
gert
--
USENET is *not* the non-clickable part of WWW!
//www.muc.de/~gert/
Gert Doering - Munich, Germany [email protected]
fax: +49-89-35655025 [email protected]
pgpvedR4h7_pQ.pgp
Description: PGP signature
_______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
