On Tue, Oct 26, 2010 at 10:12 AM, Richard A Steenbergen <r...@e-gerbil.net>wrote:
> On Tue, Oct 26, 2010 at 11:22:26AM +0300, Miroslav Georgiev wrote: > > Look at this: > > J-4350 > > Firewall Performance (Large Packets): 1.6 Gbps > > Firewall Performance (IMIX): 600 Mbps > > > > With some voice this router can't handle more than 350Mbps in > packet-mode. > > 225kpps * 1500 bytes = 2.7Gbps. > 225kpps * 64 bytes = 115Mbps. > > Or to put it another way, line rate on a GigE w/small packets is > 1.488Mpps, of which 225kpps is only ~15%. As with any software router, > the limitation is mostly in the lookups/sec, not the volume of traffic. > If you don't care about high pps or predictable performance, or if you > only have a 100Mbps uplink feeding the thing in the first place, a sw > router may be fine. But keep in mind that a $100 linux box can put out > 225kpps with one NIC tied behind its back, so you'd best hope you never > get a DoS attack. > > I probably wouldn't use the J-4350 here either, but I was a little confused by the product page. Were those the raw packet forwarding numbers? I looked at the same page and I thought those were for stateful firewalling or some other feature. _______________________________________________ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp