Re: [swinog] Full BGP Routing Router Requirements
Thanks Bernd. As you perhaps has seen, we are now thinking about a 3825 or 7201. We think both will do the job, but the 7201 will have more power. Kind Regards Patrick ** X-NetConsulting GmbH Internet http://www.x-netconsulting.ch Grosspeterstrasse 21 E-Mail p.stu...@x-netconsulting.ch CH-4052 BaselTelefon+41 61 315 85 55 Schweiz Fax+41 61 315 85 59 ** -Ursprüngliche Nachricht- Von: Bernd SPIESS [mailto:bernd.spi...@ascus.at] Gesendet: Donnerstag, 17. September 2009 14:02 An: 'Patrick Studer' Betreff: RE: [swinog] Full BGP Routing Router Requirements ipv6 is running fine also on 28 plattform asn32 - no practical info from our side - we ignored this until now :-) maybe you start here: http://www.swissix.ch/asn32/doku.php -Original Message- From: Patrick Studer [mailto:p.stu...@x-netconsulting.ch] Sent: Thursday, September 17, 2009 1:39 PM To: Bernd SPIESS; 'Pascal Gloor' Cc: 'swinog@lists.swinog.ch' Subject: AW: [swinog] Full BGP Routing Router Requirements Thanks for the link to the Router performance sheet. Do you see perhaps also some impacts about the new as-numbers or ipv6 for any of the smaller solutions (28xx, 38xx)? Regards Patrick ** X-NetConsulting GmbH Internet http://www.x-netconsulting.ch Grosspeterstrasse 21 E-Mail p.stu...@x-netconsulting.ch CH-4052 BaselTelefon+41 61 315 85 55 Schweiz Fax+41 61 315 85 59 ** -Ursprüngliche Nachricht- Von: swinog-boun...@lists.swinog.ch [mailto:swinog-boun...@lists.swinog.ch] Im Auftrag von Bernd SPIESS Gesendet: Donnerstag, 17. September 2009 11:43 An: 'Patrick Studer'; 'Pascal Gloor' Cc: 'swinog@lists.swinog.ch' Betreff: Re: [swinog] Full BGP Routing Router Requirements see here: http://www.cisco.com/web/partners/downloads/765/tools/quickreference/routerperformance.pdf 3725 = 179 mbit 3745 = 256 mbit (best case calculated with 64 byte paket size) you have to basicaly decide if you want a cpu driven box (28*, 38*, NPE-G1/G2) or a hardware driven box (sup32, sup720, c-120**) in the first case you have to primary look for the cpu performance - in the second case you have to look primary for hardware prefix puffer (256.000 prefixes versus 1 mio) lg bernd -Original Message- From: swinog-boun...@lists.swinog.ch [mailto:swinog-boun...@lists.swinog.ch] On Behalf Of Patrick Studer Sent: Thursday, September 17, 2009 11:17 AM To: 'Pascal Gloor' Cc: 'swinog@lists.swinog.ch' Subject: Re: [swinog] Full BGP Routing Router Requirements Hi Pascale That's an answer I was looking for. Some more questions. Why you suggest the SP Service IOS? What's about the 3825/45 Series? Would that be the "golden middle way"? Will this box give us a little more capacity, so there is little bit of air for the router, or is the only way to go for a 2851 or a 7xxx System? Kind Regards Patrick ** X-NetConsulting GmbH Internet http://www.x-netconsulting.ch Grosspeterstrasse 21 E-Mail p.stu...@x-netconsulting.ch CH-4052 BaselTelefon+41 61 315 85 55 Schweiz Fax+41 61 315 85 59 ** -Ursprüngliche Nachricht- Von: Pascal Gloor [mailto:pascal.gl...@spale.com] Gesendet: Donnerstag, 17. September 2009 10:41 An: studer.patr...@gmx.ch Cc: 'swinog@lists.swinog.ch' Betreff: Re: [swinog] Full BGP Routing Router Requirements Hi Patrick, > The first step will be, to have 10 Mbit/s fixed or 100 Mbit/s > burstable service with an additional link to SwissIX where we want to > do some privat peerings. > > In a second step, we will add a second or a third upstream with about > the same speeds as the first connection. All connection should be done > by normal Ethernet connection. As a minimal BGP setup I usually suggest to have one 2851 per upstream. It needs some upgrades, 1Gb DRAM and SP SERVICES IOS. This router has two GigabitEthernet interface so you can use one for wan and one for lan. You can also add a 4 ports 10/100 switch module if you need multiple lan connexions (limited to 100mbps). If you have multiple upstream providers and therefor multiple routers, I suggest to have a separate lan (maybe vlan) with all the routers in it for the iBGP full mesh. This is, indeed, a minimal setup, I wont protect you from attacks of any kind and the router capacity is limited.
Re: [swinog] Full BGP Routing Router Requirements
Ciao Thomas Besten Dank für den Input. Im Moment haben wir den 7201 oder den 3825 in die nähere Auswahl einbezogen. So wie wir das sehen ist der 7201 ja ein 720x mit NPE-G2 (einfach halt nur mit 1 Slot statt mit 4 oder 6), was ja dann vermutlich für die nächsten Zeit reichen sollte. Oder sehen wir das falsch. Grüsse Patrick ** X-NetConsulting GmbH Internet http://www.x-netconsulting.ch Grosspeterstrasse 21 E-Mail p.stu...@x-netconsulting.ch CH-4052 BaselTelefon+41 61 315 85 55 Schweiz Fax+41 61 315 85 59 ** -Ursprüngliche Nachricht- Von: Thomas Koeppe [KGT new media] [mailto:i...@k-dsl.de] Gesendet: Donnerstag, 17. September 2009 16:10 An: p.stu...@x-netconsulting.ch Betreff: Re: [swinog] Full BGP Routing Router Requirements Hoi Patrick, ich perso"nlich wu"rde nicht mit einer kleinen Cisco 2811 oder dergleichen anfangen. Mit vollem RAM-Ausbau bekommst Du dort hoechstwahrscheinlich nur 1x Full Table rein und hast kaum Platz fu"r notwendige zuku"nftige Erweiterungen. Ich kann Dir die 7206VXR inkl. NPE-G1 oder NPE-G2 empfehlen. Die G1 hat 1 GB RAM, die G2 max. 2 GB RAM. Dort bist Du auf alle Fa"lle auf der sicheren Seite. Die G1 gibt es so ab 7-8k und die G2 so round about 10k Euro wenn Du geschickt verhandelst. Hier hast Du auch noch Reserven fu"r zuku"nftige Features. (IPv6, MPLS, etc.) Wenn Du weniger Geld ausgeben willst, stell Dir einen "dicken" Server auf PC-Basis hin und installiere einfach ein Quagga drauf. Der kann auch alle neuen Features die man so braucht (ASN 32-bit, IPv6, etc...) und kostet _deutlich_ weniger Geld als Vendor C. Je nach Hardware bist Du mit 1-2k Euro dabei. Wir haben am SwissIX auch einen Linux-Quagga based Router am laufen. Sehr stabil, sehr wartungsarm. Allerdings machen wir auch nur bis max. 100mbps am SwissIX. Die zwei Xeon-CPUs langweilen sich vor sich hin und von den installaierten 8GB RAM ist noch Platz fu"r 100x Full-Table ;) Vom Look&Feel her ist das Quagga-CLI fast identisch mit dem Cisco-CLI, sogar teilweise die gleichen Befehle. HTH, Thomas On 17.09.2009 09:49, studer.patr...@gmx.ch wrote: > Hi > > We are planning to go multihomed with our infrastructure. > > The first step will be, to have 10 Mbit/s fixed or 100 Mbit/s burstable > service > with an additional link to SwissIX where we want to do some privat peerings. > > In a second step, we will add a second or a third upstream with about the > same speeds as the first connection. All connection should be done by > normal Ethernet connection. > > Currently we have a Cisco 2811 with 256 MB Ram. Would it be enough for the > first > step to upgrade the ram to 768 MB or will it be necessary to buy a > better/bigger > router (2851, 3825 or 720x system). > > We tried to find some recommendations on the internet, but we wasn't > successful. > > What is your recommendation for this scenario? > > Regards > > Patrick Studer > > ** > X-NetConsulting GmbH Internet http://www.x-netconsulting.ch > Grosspeterstrasse 21 E-Mail p.stu...@x-netconsulting.ch > CH-4052 BaselTelefon+41 61 315 85 55 > Schweiz Fax+41 61 315 85 59 > ** > > > > > ___ > swinog mailing list > swinog@lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog > -- Thomas Koeppe Network Engineering Team Tel: +49 (0)30 / 80 93 201 - 25 Fax: +49 (0)30 / 80 93 201 - 20 E-Mail: supp...@k-dsl.de KGT new media Mo"llendorffstrasse 108/109 D-10367 Berlin, Germany Tel: +49 (0)30 / 80 93 201 - 0 Fax: +49 (0)30 / 80 93 201 - 20 E-Mail: i...@k-dsl.de Internet: http://www.k-dsl.de Inh.: Dorle Ko"ppe VAT: DE217875774 X-NCC-RegID: de.kgtnewmedia ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Multihomed project
Hi Patrick, The Cisco's 7201 works perfectly as CPE, they support most protocol and are even a bit evolutive. As your budget is a limitation, one option is to get a 7201 from the official market, so with all guarantees and support you need from Cisco and your reseller and grab a second one from the grey market / refurbished. You can find some fair deals on ebay for US 8000$, or even have a second 3825 from ebay for 2-3k. Then you may want to have your 7201 populated with ISP#1 on 0/0, SwissIX on 0/1 and your HSRP link on 0/2, then you would have your ISP#2 on the 0/0 and HSRP on the 0/1 of your 3825. You will have to pick the right ISP on the main router and you have your HA routing cluster working fine for a fair price. Once you have the budget to consolidate you grab a second 7201 and you just do it the best way. Cheers. On Thu, 17 Sep 2009 16:17:00 +0200, Patrick Studer wrote: > Hi Alexandre > > Thanks for your suggestion. The solution with a 7201 looks very interesting > and since one 7201 is near of the price of two 3825, that could be perhaps > the solutions for which we should go. The only thing is, that with two > separate > boxes, we are better covered in the case of hardware failure. > > Kind Regards > > Patrick Studer > > ** > X-NetConsulting GmbH Internet > http://www.x-netconsulting.ch > Grosspeterstrasse 21 E-Mail p.stu...@x-netconsulting.ch > CH-4052 BaselTelefon+41 61 315 85 55 > Schweiz Fax+41 61 315 85 59 > ** > > > -Ursprüngliche Nachricht- > Von: Alexandre Egger [mailto:a.eg...@neocarrier.com] > Gesendet: Donnerstag, 17. September 2009 13:39 > An: Patrick Studer > Betreff: Multihomed project > > Hi Patrick, > > I've seen your message on SwiNOG list for your multihoming project. > > If you have the budget and want to stick with Cisco, I would suggest you > using 7201. They works very well and comes with 1GB or RAM. The end-user > price in CHF is ~ 26200CHF, but you can probably get a good 5000 CHF > discount since it is likely sold around 18k at reseller price. > > Ohterwise as you mentioned the 3800 series can be a way to go. The 3825 > with a RAM upgrade to 1GB would bet a very good one, with end-user price of > 10K (with 256 MB of RAM) you can probably grab one for 8500 CHF. > > If you are looking for a provider to offer you ASN, IP v4/v6 PI blocks, or > even hardware please feel free to knock at our door. We price very > attractive and have suppliers in Switzerland for hardware from the normal > market. We are also able to provide you very attractive IP transit services > if you are somewhere between Equinix 1 and ICT-Center Zurich. > > Wish you the best for your project! > > Cheers. -- Alexandre Egger Neocarrier Communications LTD 311, SHOREHAM STREET S2 4FA SHEFFIELD United Kingdom E : a.eg...@neocarrier.com W : www.neocarrier.com ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Full BGP Routing Router Requirements
Ciao Reto Wir werden vermutlich in einem Datacenter in Basel starten. Aber danke für den Hinweis. Grüsse Patrick ** X-NetConsulting GmbH Internet http://www.x-netconsulting.ch Grosspeterstrasse 21 E-Mail p.stu...@x-netconsulting.ch CH-4052 BaselTelefon+41 61 315 85 55 Schweiz Fax+41 61 315 85 59 ** -Ursprüngliche Nachricht- Von: Reto Burkhalter [mailto:reto.burkhal...@basis06.com] Gesendet: Donnerstag, 17. September 2009 14:26 An: Patrick Studer Betreff: AW: [swinog] Full BGP Routing Router Requirements Hoi Patrick Dann empfehle ich an dieser Stelle doch mal die colozüri.ch - genügend Carriers und ISPs vorhanden, welche easy über Kupfer/Glas Fast/GigE liefern können, SwissIX im Hause und auch sonst ne nette Colo :-) -> http://www.colozueri.ch/ Gruss Reto > -Ursprüngliche Nachricht- > Von: Patrick Studer [mailto:p.stu...@x-netconsulting.ch] > Gesendet: Donnerstag, 17. September 2009 10:33 > An: 'Matthias Hertzog' > Cc: 'swinog@lists.swinog.ch' > Betreff: Re: [swinog] Full BGP Routing Router Requirements > > > Hallo Matthias > > Das steht noch nicht fest. Wir planen aber unsere RZ in ein externes > Datacenter auszulagern, welches die benötigten Anbindungen zu > anderen ISPs > für Upstream und den Zugang zu SwissIX bietet. > > Grüsse > > Patrick > > ** > > X-NetConsulting GmbH Internet > http://www.x-netconsulting.ch > Grosspeterstrasse 21 E-Mail > p.stu...@x-netconsulting.ch > CH-4052 BaselTelefon+41 61 315 85 55 > Schweiz Fax+41 61 315 85 59 > ** > > > > -Ursprüngliche Nachricht- > Von: Matthias Hertzog [mailto:m.hert...@mhs.ch] > Gesendet: Donnerstag, 17. September 2009 10:10 > An: p.stu...@x-netconsulting.ch > Betreff: Re: [swinog] Full BGP Routing Router Requirements > > Sali Patrick > > Wo steht euer RZ? > > Viele Grüsse > Matthias > > _ > > mhs @ internet AG > Zürcherstrasse 204, CH - 9014 St. Gallen > Phone +41 71 274 93 93, Fax +41 71 274 93 94 > http://www.mhs.ch > _ > > - Original Message - > From: > To: > Sent: Thursday, September 17, 2009 9:49 AM > Subject: [swinog] Full BGP Routing Router Requirements > > > > Hi > > > > We are planning to go multihomed with our infrastructure. > > > > The first step will be, to have 10 Mbit/s fixed or 100 > Mbit/s burstable > > service > > with an additional link to SwissIX where we want to do some privat > > peerings. > > > > In a second step, we will add a second or a third upstream > with about the > > same speeds as the first connection. All connection should > be done by > > normal Ethernet connection. > > > > Currently we have a Cisco 2811 with 256 MB Ram. Would it be > enough for the > > first > > step to upgrade the ram to 768 MB or will it be necessary to buy a > > better/bigger > > router (2851, 3825 or 720x system). > > > > We tried to find some recommendations on the internet, but > we wasn't > > successful. > > > > What is your recommendation for this scenario? > > > > Regards > > > > Patrick Studer > > > > > ** > > > X-NetConsulting GmbH Internet > > http://www.x-netconsulting.ch > > Grosspeterstrasse 21 E-Mail > > p.stu...@x-netconsulting.ch > > CH-4052 BaselTelefon+41 61 315 85 55 > > Schweiz Fax+41 61 315 85 59 > > > ** > > > > > > > > > > > ___ > > swinog mailing list > > swinog@lists.swinog.ch > > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog > > > > > > ___ > swinog mailing list > swinog@lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog > ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Multihomed project
Hi Alexandre Thanks for your suggestion. The solution with a 7201 looks very interesting and since one 7201 is near of the price of two 3825, that could be perhaps the solutions for which we should go. The only thing is, that with two separate boxes, we are better covered in the case of hardware failure. Kind Regards Patrick Studer ** X-NetConsulting GmbH Internet http://www.x-netconsulting.ch Grosspeterstrasse 21 E-Mail p.stu...@x-netconsulting.ch CH-4052 BaselTelefon+41 61 315 85 55 Schweiz Fax+41 61 315 85 59 ** -Ursprüngliche Nachricht- Von: Alexandre Egger [mailto:a.eg...@neocarrier.com] Gesendet: Donnerstag, 17. September 2009 13:39 An: Patrick Studer Betreff: Multihomed project Hi Patrick, I've seen your message on SwiNOG list for your multihoming project. If you have the budget and want to stick with Cisco, I would suggest you using 7201. They works very well and comes with 1GB or RAM. The end-user price in CHF is ~ 26200CHF, but you can probably get a good 5000 CHF discount since it is likely sold around 18k at reseller price. Ohterwise as you mentioned the 3800 series can be a way to go. The 3825 with a RAM upgrade to 1GB would bet a very good one, with end-user price of 10K (with 256 MB of RAM) you can probably grab one for 8500 CHF. If you are looking for a provider to offer you ASN, IP v4/v6 PI blocks, or even hardware please feel free to knock at our door. We price very attractive and have suppliers in Switzerland for hardware from the normal market. We are also able to provide you very attractive IP transit services if you are somewhere between Equinix 1 and ICT-Center Zurich. Wish you the best for your project! Cheers. -- Alexandre Egger Neocarrier Communications LTD 311, SHOREHAM STREET S2 4FA SHEFFIELD United Kingdom E : a.eg...@neocarrier.com W : www.neocarrier.com ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Full BGP Routing Router Requirements
Thanks for the link to the Router performance sheet. Do you see perhaps also some impacts about the new as-numbers or ipv6 for any of the smaller solutions (28xx, 38xx)? Regards Patrick ** X-NetConsulting GmbH Internet http://www.x-netconsulting.ch Grosspeterstrasse 21 E-Mail p.stu...@x-netconsulting.ch CH-4052 BaselTelefon+41 61 315 85 55 Schweiz Fax+41 61 315 85 59 ** -Ursprüngliche Nachricht- Von: swinog-boun...@lists.swinog.ch [mailto:swinog-boun...@lists.swinog.ch] Im Auftrag von Bernd SPIESS Gesendet: Donnerstag, 17. September 2009 11:43 An: 'Patrick Studer'; 'Pascal Gloor' Cc: 'swinog@lists.swinog.ch' Betreff: Re: [swinog] Full BGP Routing Router Requirements see here: http://www.cisco.com/web/partners/downloads/765/tools/quickreference/routerperformance.pdf 3725 = 179 mbit 3745 = 256 mbit (best case calculated with 64 byte paket size) you have to basicaly decide if you want a cpu driven box (28*, 38*, NPE-G1/G2) or a hardware driven box (sup32, sup720, c-120**) in the first case you have to primary look for the cpu performance - in the second case you have to look primary for hardware prefix puffer (256.000 prefixes versus 1 mio) lg bernd -Original Message- From: swinog-boun...@lists.swinog.ch [mailto:swinog-boun...@lists.swinog.ch] On Behalf Of Patrick Studer Sent: Thursday, September 17, 2009 11:17 AM To: 'Pascal Gloor' Cc: 'swinog@lists.swinog.ch' Subject: Re: [swinog] Full BGP Routing Router Requirements Hi Pascale That's an answer I was looking for. Some more questions. Why you suggest the SP Service IOS? What's about the 3825/45 Series? Would that be the "golden middle way"? Will this box give us a little more capacity, so there is little bit of air for the router, or is the only way to go for a 2851 or a 7xxx System? Kind Regards Patrick ** X-NetConsulting GmbH Internet http://www.x-netconsulting.ch Grosspeterstrasse 21 E-Mail p.stu...@x-netconsulting.ch CH-4052 BaselTelefon+41 61 315 85 55 Schweiz Fax+41 61 315 85 59 ** -Ursprüngliche Nachricht- Von: Pascal Gloor [mailto:pascal.gl...@spale.com] Gesendet: Donnerstag, 17. September 2009 10:41 An: studer.patr...@gmx.ch Cc: 'swinog@lists.swinog.ch' Betreff: Re: [swinog] Full BGP Routing Router Requirements Hi Patrick, > The first step will be, to have 10 Mbit/s fixed or 100 Mbit/s > burstable service with an additional link to SwissIX where we want to > do some privat peerings. > > In a second step, we will add a second or a third upstream with about > the same speeds as the first connection. All connection should be done > by normal Ethernet connection. As a minimal BGP setup I usually suggest to have one 2851 per upstream. It needs some upgrades, 1Gb DRAM and SP SERVICES IOS. This router has two GigabitEthernet interface so you can use one for wan and one for lan. You can also add a 4 ports 10/100 switch module if you need multiple lan connexions (limited to 100mbps). If you have multiple upstream providers and therefor multiple routers, I suggest to have a separate lan (maybe vlan) with all the routers in it for the iBGP full mesh. This is, indeed, a minimal setup, I wont protect you from attacks of any kind and the router capacity is limited. However you should be able to route at least 100-200mbps. If you really need protection, you will need a 7200-NPE-G1/2 (which will be able to hold 700-1000mbps traffic), but still, its capacity to hold directed attacks is limited. For best protection a suggest a 7600-RSP720-3CXL which is full hardware platform, protection of the router can be done in hardware (CPP, control-plane policy). But this might be just a little bit too expensive... Cheers, Pascal ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Full BGP Routing Router Requirements
Hallo Viktor Wie wäre denn Deine Empfehlung. Etwas grösseres ist etwas unklar ;-). Grüsse Patrick ** X-NetConsulting GmbH Internet http://www.x-netconsulting.ch Grosspeterstrasse 21 E-Mail p.stu...@x-netconsulting.ch CH-4052 BaselTelefon+41 61 315 85 55 Schweiz Fax+41 61 315 85 59 ** -Ursprüngliche Nachricht- Von: Viktor Steinmann [mailto:st...@stony.com] Gesendet: Donnerstag, 17. September 2009 10:40 An: studer.patr...@gmx.ch Betreff: RE: [swinog] Full BGP Routing Router Requirements Hoi Patrick Ich würde schwer empfehlen, etwas grösseres reinzustellen. Erstens wächst die BGP-Tabelle unaufhörlich, zweitens steigt der Memory-Bedarf mit jedem angehängten Peering und drittens wirst du eventuell mal auf IPv6 migrieren wollen/müssen. Um die Kosten im Griff zu behalten, kannst du locker einen Router von einem Used-Hardware-Dealer beziehen - ich hab' das früher immer so gemacht und bin damit nie schlecht gefahren (Kratzer am Gehäuse haben keinen Einfluss auf den Durchsatz ;-)) Grüessli, Viktor > -Original Message- > From: swinog-boun...@lists.swinog.ch > [mailto:swinog-boun...@lists.swinog.ch] On Behalf Of > studer.patr...@gmx.ch > Sent: Donnerstag, 17. September 2009 09:49 > To: 'swinog@lists.swinog.ch' > Subject: [swinog] Full BGP Routing Router Requirements > > Hi > > We are planning to go multihomed with our infrastructure. > > The first step will be, to have 10 Mbit/s fixed or 100 Mbit/s > burstable service > with an additional link to SwissIX where we want to do some > privat peerings. > > In a second step, we will add a second or a third upstream > with about the > same speeds as the first connection. All connection should be done by > normal Ethernet connection. > > Currently we have a Cisco 2811 with 256 MB Ram. Would it be > enough for the first > step to upgrade the ram to 768 MB or will it be necessary to > buy a better/bigger > router (2851, 3825 or 720x system). > > We tried to find some recommendations on the internet, but we > wasn't successful. > > What is your recommendation for this scenario? > > Regards > > Patrick Studer > > ** > > X-NetConsulting GmbH Internet > http://www.x-netconsulting.ch > Grosspeterstrasse 21 E-Mail > p.stu...@x-netconsulting.ch > CH-4052 BaselTelefon+41 61 315 85 55 > Schweiz Fax+41 61 315 85 59 > ** > > > > > > ___ > swinog mailing list > swinog@lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog > ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Full BGP Routing Router Requirements
On Thu, Sep 17, 2009 at 11:42:51AM +0200, Bernd SPIESS wrote: > you have to basicaly decide if you want a cpu driven box (28*, 38*, > NPE-G1/G2) or a hardware > driven box (sup32, sup720, c-120**) > in the first case you have to primary look for the cpu performance - in the > second case you have to > look primary for hardware prefix puffer (256.000 prefixes versus 1 mio) In case of hardware platforms, one should also be very careful about feature requirements - to avoid hitting something either unsupported or handled in software by the CPU with unavoidable penalties. Cheers, Paolo ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Full BGP Routing Router Requirements
see here: http://www.cisco.com/web/partners/downloads/765/tools/quickreference/routerperformance.pdf 3725 = 179 mbit 3745 = 256 mbit (best case calculated with 64 byte paket size) you have to basicaly decide if you want a cpu driven box (28*, 38*, NPE-G1/G2) or a hardware driven box (sup32, sup720, c-120**) in the first case you have to primary look for the cpu performance - in the second case you have to look primary for hardware prefix puffer (256.000 prefixes versus 1 mio) lg bernd -Original Message- From: swinog-boun...@lists.swinog.ch [mailto:swinog-boun...@lists.swinog.ch] On Behalf Of Patrick Studer Sent: Thursday, September 17, 2009 11:17 AM To: 'Pascal Gloor' Cc: 'swinog@lists.swinog.ch' Subject: Re: [swinog] Full BGP Routing Router Requirements Hi Pascale That's an answer I was looking for. Some more questions. Why you suggest the SP Service IOS? What's about the 3825/45 Series? Would that be the "golden middle way"? Will this box give us a little more capacity, so there is little bit of air for the router, or is the only way to go for a 2851 or a 7xxx System? Kind Regards Patrick ** X-NetConsulting GmbH Internet http://www.x-netconsulting.ch Grosspeterstrasse 21 E-Mail p.stu...@x-netconsulting.ch CH-4052 BaselTelefon+41 61 315 85 55 Schweiz Fax+41 61 315 85 59 ** -Ursprüngliche Nachricht- Von: Pascal Gloor [mailto:pascal.gl...@spale.com] Gesendet: Donnerstag, 17. September 2009 10:41 An: studer.patr...@gmx.ch Cc: 'swinog@lists.swinog.ch' Betreff: Re: [swinog] Full BGP Routing Router Requirements Hi Patrick, > The first step will be, to have 10 Mbit/s fixed or 100 Mbit/s > burstable service with an additional link to SwissIX where we want to > do some privat peerings. > > In a second step, we will add a second or a third upstream with about > the same speeds as the first connection. All connection should be done > by normal Ethernet connection. As a minimal BGP setup I usually suggest to have one 2851 per upstream. It needs some upgrades, 1Gb DRAM and SP SERVICES IOS. This router has two GigabitEthernet interface so you can use one for wan and one for lan. You can also add a 4 ports 10/100 switch module if you need multiple lan connexions (limited to 100mbps). If you have multiple upstream providers and therefor multiple routers, I suggest to have a separate lan (maybe vlan) with all the routers in it for the iBGP full mesh. This is, indeed, a minimal setup, I wont protect you from attacks of any kind and the router capacity is limited. However you should be able to route at least 100-200mbps. If you really need protection, you will need a 7200-NPE-G1/2 (which will be able to hold 700-1000mbps traffic), but still, its capacity to hold directed attacks is limited. For best protection a suggest a 7600-RSP720-3CXL which is full hardware platform, protection of the router can be done in hardware (CPP, control-plane policy). But this might be just a little bit too expensive... Cheers, Pascal ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Full BGP Routing Router Requirements
Hi Peter Thanks for the input (incl. the hint for Kingston, which we already know ;-)). Depending, on what we get form other as suggestion, we think that we will start with a 28xx or 38xx router. Kind Regards Patrick ** X-NetConsulting GmbH Internet http://www.x-netconsulting.ch Grosspeterstrasse 21 E-Mail p.stu...@x-netconsulting.ch CH-4052 BaselTelefon+41 61 315 85 55 Schweiz Fax+41 61 315 85 59 ** -Ursprüngliche Nachricht- Von: Peter Kohler [mailto:peter.koh...@netcetera.ch] Gesendet: Donnerstag, 17. September 2009 11:22 An: studer.patr...@gmx.ch Betreff: Re: [swinog] Full BGP Routing Router Requirements Hi Patrick, ...i forgot to mention, that we also had to buy/license the "IPAdvanced Service" image for the 2811 in order to do BGP4. Peter -- Travel in and around Zürich with our free iPhone application Wemlin: http://mobile.netcetera.ch/wemlin Dr. Peter Kohler | peter.koh...@netcetera.ch phone +41-44-247 79 03 | fax +41-44-247 70 75 Netcetera AG | 8040 Zürich | Switzerland | http://netcetera.ch ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Full BGP Routing Router Requirements
Hi Pascale That's an answer I was looking for. Some more questions. Why you suggest the SP Service IOS? What's about the 3825/45 Series? Would that be the "golden middle way"? Will this box give us a little more capacity, so there is little bit of air for the router, or is the only way to go for a 2851 or a 7xxx System? Kind Regards Patrick ** X-NetConsulting GmbH Internet http://www.x-netconsulting.ch Grosspeterstrasse 21 E-Mail p.stu...@x-netconsulting.ch CH-4052 BaselTelefon+41 61 315 85 55 Schweiz Fax+41 61 315 85 59 ** -Ursprüngliche Nachricht- Von: Pascal Gloor [mailto:pascal.gl...@spale.com] Gesendet: Donnerstag, 17. September 2009 10:41 An: studer.patr...@gmx.ch Cc: 'swinog@lists.swinog.ch' Betreff: Re: [swinog] Full BGP Routing Router Requirements Hi Patrick, > The first step will be, to have 10 Mbit/s fixed or 100 Mbit/s > burstable service with an additional link to SwissIX where we want to > do some privat peerings. > > In a second step, we will add a second or a third upstream with about > the same speeds as the first connection. All connection should be done > by normal Ethernet connection. As a minimal BGP setup I usually suggest to have one 2851 per upstream. It needs some upgrades, 1Gb DRAM and SP SERVICES IOS. This router has two GigabitEthernet interface so you can use one for wan and one for lan. You can also add a 4 ports 10/100 switch module if you need multiple lan connexions (limited to 100mbps). If you have multiple upstream providers and therefor multiple routers, I suggest to have a separate lan (maybe vlan) with all the routers in it for the iBGP full mesh. This is, indeed, a minimal setup, I wont protect you from attacks of any kind and the router capacity is limited. However you should be able to route at least 100-200mbps. If you really need protection, you will need a 7200-NPE-G1/2 (which will be able to hold 700-1000mbps traffic), but still, its capacity to hold directed attacks is limited. For best protection a suggest a 7600-RSP720-3CXL which is full hardware platform, protection of the router can be done in hardware (CPP, control-plane policy). But this might be just a little bit too expensive... Cheers, Pascal ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Full BGP Routing Router Requirements
Hi Patrick, The first step will be, to have 10 Mbit/s fixed or 100 Mbit/s burstable service with an additional link to SwissIX where we want to do some privat peerings. In a second step, we will add a second or a third upstream with about the same speeds as the first connection. All connection should be done by normal Ethernet connection. As a minimal BGP setup I usually suggest to have one 2851 per upstream. It needs some upgrades, 1Gb DRAM and SP SERVICES IOS. This router has two GigabitEthernet interface so you can use one for wan and one for lan. You can also add a 4 ports 10/100 switch module if you need multiple lan connexions (limited to 100mbps). If you have multiple upstream providers and therefor multiple routers, I suggest to have a separate lan (maybe vlan) with all the routers in it for the iBGP full mesh. This is, indeed, a minimal setup, I wont protect you from attacks of any kind and the router capacity is limited. However you should be able to route at least 100-200mbps. If you really need protection, you will need a 7200-NPE-G1/2 (which will be able to hold 700-1000mbps traffic), but still, its capacity to hold directed attacks is limited. For best protection a suggest a 7600-RSP720-3CXL which is full hardware platform, protection of the router can be done in hardware (CPP, control-plane policy). But this might be just a little bit too expensive... Cheers, Pascal smime.p7s Description: S/MIME cryptographic signature ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Full BGP Routing Router Requirements
Hallo Matthias Das steht noch nicht fest. Wir planen aber unsere RZ in ein externes Datacenter auszulagern, welches die benötigten Anbindungen zu anderen ISPs für Upstream und den Zugang zu SwissIX bietet. Grüsse Patrick ** X-NetConsulting GmbH Internet http://www.x-netconsulting.ch Grosspeterstrasse 21 E-Mail p.stu...@x-netconsulting.ch CH-4052 BaselTelefon+41 61 315 85 55 Schweiz Fax+41 61 315 85 59 ** -Ursprüngliche Nachricht- Von: Matthias Hertzog [mailto:m.hert...@mhs.ch] Gesendet: Donnerstag, 17. September 2009 10:10 An: p.stu...@x-netconsulting.ch Betreff: Re: [swinog] Full BGP Routing Router Requirements Sali Patrick Wo steht euer RZ? Viele Grüsse Matthias _ mhs @ internet AG Zürcherstrasse 204, CH - 9014 St. Gallen Phone +41 71 274 93 93, Fax +41 71 274 93 94 http://www.mhs.ch _ - Original Message - From: To: Sent: Thursday, September 17, 2009 9:49 AM Subject: [swinog] Full BGP Routing Router Requirements > Hi > > We are planning to go multihomed with our infrastructure. > > The first step will be, to have 10 Mbit/s fixed or 100 Mbit/s burstable > service > with an additional link to SwissIX where we want to do some privat > peerings. > > In a second step, we will add a second or a third upstream with about the > same speeds as the first connection. All connection should be done by > normal Ethernet connection. > > Currently we have a Cisco 2811 with 256 MB Ram. Would it be enough for the > first > step to upgrade the ram to 768 MB or will it be necessary to buy a > better/bigger > router (2851, 3825 or 720x system). > > We tried to find some recommendations on the internet, but we wasn't > successful. > > What is your recommendation for this scenario? > > Regards > > Patrick Studer > > ** > X-NetConsulting GmbH Internet > http://www.x-netconsulting.ch > Grosspeterstrasse 21 E-Mail > p.stu...@x-netconsulting.ch > CH-4052 BaselTelefon+41 61 315 85 55 > Schweiz Fax+41 61 315 85 59 > ** > > > > > ___ > swinog mailing list > swinog@lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog > ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Full BGP Routing Router Requirements
Hi We prefer to have a Cisco box, since we have about 15 years of cisco experience. Kind Regards Patrick ** X-NetConsulting GmbH Internet http://www.x-netconsulting.ch Grosspeterstrasse 21 E-Mail p.stu...@x-netconsulting.ch CH-4052 BaselTelefon+41 61 315 85 55 Schweiz Fax+41 61 315 85 59 ** -Ursprüngliche Nachricht- Von: Marcel Prisi [mailto:marcel.pr...@virtua.ch] Gesendet: Donnerstag, 17. September 2009 10:02 An: studer.patr...@gmx.ch Betreff: Re: [swinog] Full BGP Routing Router Requirements Dear Patrick, We have been using PC based (HP servers + SSD) Vyatta routers for some time, they work extremely well at the fraction of the price of Cisco gear. We setup a full AS with two upstreams here at Sefanet, including full redundancy for a great price ... tell me if you are interested ! Best regards. Le jeudi 17 septembre 2009 à 09:49 +0200, studer.patr...@gmx.ch a écrit : > Hi > > We are planning to go multihomed with our infrastructure. > > The first step will be, to have 10 Mbit/s fixed or 100 Mbit/s > burstable service with an additional link to SwissIX where we want to do some > privat peerings. > > In a second step, we will add a second or a third upstream with about > the same speeds as the first connection. All connection should be done > by normal Ethernet connection. > > Currently we have a Cisco 2811 with 256 MB Ram. Would it be enough for > the first step to upgrade the ram to 768 MB or will it be necessary to > buy a better/bigger router (2851, 3825 or 720x system). > > We tried to find some recommendations on the internet, but we wasn't > successful. > > What is your recommendation for this scenario? > > Regards > > Patrick Studer > > ** > X-NetConsulting GmbH Internet http://www.x-netconsulting.ch > Grosspeterstrasse 21 E-Mail p.stu...@x-netconsulting.ch > CH-4052 BaselTelefon+41 61 315 85 55 > Schweiz Fax+41 61 315 85 59 > ** > > > > > > ___ > swinog mailing list > swinog@lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog > -- Marcel Prisi co-director - head of network services virtua SA interactive communication agency En Clamogne 27 Ch -1170 Aubonne T. +41 21 821 15 20 F. +41 21 821 15 21 virtua | from internet to business® | · · ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Full BGP Routing Router Requirements
If possible, it would be nice to survive a ddos ;-) That the 256 MB isn't enough is clear. Because of this we asked, if it will be enough just to upgrade to 768 MB to hold a full routing table or not. Or to ask the question direct, what is the minimum memory requirements to hold a full routing table from one or two upstreams and have some privat peerings at SwissIX? It's more a question of, if the 2811 can do this job and we can add perhaps a second 2811 for a second upstream, or if we should start over with a better solution. Since the router isn't too old, we like to use it for this. If your recommendation is to go with a 3845, then we have to forget about idea to go with the 2811. We just like to know, what will be the minimum requirements and the disadvantage of this minimum solution, and what will be the best cost/performance solutions for that scenario. Regards Patrick ** X-NetConsulting GmbH Internet http://www.x-netconsulting.ch Grosspeterstrasse 21 E-Mail p.stu...@x-netconsulting.ch CH-4052 BaselTelefon+41 61 315 85 55 Schweiz Fax+41 61 315 85 59 ** -Ursprüngliche Nachricht- Von: Bernd SPIESS [mailto:bernd.spi...@i3b.at] Gesendet: Donnerstag, 17. September 2009 09:54 An: studer.patr...@gmx.ch Betreff: RE: [swinog] Full BGP Routing Router Requirements it depends do you want to survive a ddos or not? with 100 mbit link speed a 2811 will die for 100% when you receive a dos/ddos in your direction 256 mb ram will also be to less for multihoming if you want to have one or two full routing table. It will be ok for two default routes and some peering routes. what is your budget ? typically a standard setup for a stable multihoming scenario with two core routers build with cisco can go from 10k until 20k euro below 10k€ you don’t get a solution with solves all cases. bernd -Original Message- From: swinog-boun...@lists.swinog.ch [mailto:swinog-boun...@lists.swinog.ch] On Behalf Of studer.patr...@gmx.ch Sent: Thursday, September 17, 2009 9:49 AM To: 'swinog@lists.swinog.ch' Subject: [swinog] Full BGP Routing Router Requirements Hi We are planning to go multihomed with our infrastructure. The first step will be, to have 10 Mbit/s fixed or 100 Mbit/s burstable service with an additional link to SwissIX where we want to do some privat peerings. In a second step, we will add a second or a third upstream with about the same speeds as the first connection. All connection should be done by normal Ethernet connection. Currently we have a Cisco 2811 with 256 MB Ram. Would it be enough for the first step to upgrade the ram to 768 MB or will it be necessary to buy a better/bigger router (2851, 3825 or 720x system). We tried to find some recommendations on the internet, but we wasn't successful. What is your recommendation for this scenario? Regards Patrick Studer ** X-NetConsulting GmbH Internet http://www.x-netconsulting.ch Grosspeterstrasse 21 E-Mail p.stu...@x-netconsulting.ch CH-4052 BaselTelefon+41 61 315 85 55 Schweiz Fax+41 61 315 85 59 ** ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
[swinog] Full BGP Routing Router Requirements
Hi We are planning to go multihomed with our infrastructure. The first step will be, to have 10 Mbit/s fixed or 100 Mbit/s burstable service with an additional link to SwissIX where we want to do some privat peerings. In a second step, we will add a second or a third upstream with about the same speeds as the first connection. All connection should be done by normal Ethernet connection. Currently we have a Cisco 2811 with 256 MB Ram. Would it be enough for the first step to upgrade the ram to 768 MB or will it be necessary to buy a better/bigger router (2851, 3825 or 720x system). We tried to find some recommendations on the internet, but we wasn't successful. What is your recommendation for this scenario? Regards Patrick Studer ** X-NetConsulting GmbH Internet http://www.x-netconsulting.ch Grosspeterstrasse 21 E-Mail p.stu...@x-netconsulting.ch CH-4052 BaselTelefon+41 61 315 85 55 Schweiz Fax+41 61 315 85 59 ** ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
