Re: Low Cost 10G Router

2015-05-20 Thread BPNoC Group
On Wed, May 20, 2015 at 9:16 PM, Eduardo Schoedler wrote: > 2015-05-20 20:54 GMT-03:00 BPNoC Group : > > right now I'm pushing 11G/s 1.2Mpps, ServerU L-800 + Chelsio T580-CR, see > > below > > although you can ssh in, it's definitely not a software router since it's > > essentially T5 ASICS hardw

Re: Low Cost 10G Router

2015-05-20 Thread Colton Conor
Bryan, Very interesting. Doesn't ALU mainly compare the new Alcatel SRa-4/8 router vs a MX104 though? Besides no redundancy, what limitations does the MX80 and MX104 have? I am assume the Juniper does not have "BGP is multi-threaded on the box, does RPKI for route verification, and it's got exten

Re: Low Cost 10G Router

2015-05-20 Thread Eduardo Schoedler
2015-05-20 20:54 GMT-03:00 BPNoC Group : > right now I'm pushing 11G/s 1.2Mpps, ServerU L-800 + Chelsio T580-CR, see > below > although you can ssh in, it's definitely not a software router since it's > essentially T5 ASICS hardware pushing the packets > > % sudo rate -i cxgbe0 -R -b > => Currently

Re: Low Cost 10G Router

2015-05-20 Thread Bryan Fields
On 5/19/15 1:22 PM, Colton Conor wrote: > What options are available for a small, low cost router that has at least > four 10G ports, and can handle full BGP routes? All that I know of are the > Juniper MX80, and the Brocade CER line. What does Cisco and others have > that compete with these two? A

Re: Low Cost 10G Router

2015-05-20 Thread BPNoC Group
On Wed, May 20, 2015 at 1:42 PM, Colton Conor wrote: > So, from the sounds of it most are saying for low cost, the way to go would > be a software router, which I was trying to avoid. To answer the bandwidth > question, we would have three 10G ports with three different carriers and > at max push

Re: Low Cost 10G Router

2015-05-20 Thread Faisal Imtiaz
Well said Eddie, It would be worth pointing out that on CCR's each port also has a core dedicated to it, a benefit of such a design is that each port is able to handle a much higher PPS rate, and if there is a DDOS attack on one port, it will not bring down the rest of the ports / router etc. (

Re: Low Cost 10G Router

2015-05-20 Thread Eddie Tardist
On Wed, May 20, 2015 at 2:07 PM, Mike Hammett wrote: > Well, the cores on a many-core CPU aren't going to have the "torque" that > a Xeon would. They're also still working on the software. It has gotten a > ton better over the life of the CCRs thus far. BGP is still atrocious on > the CCRs, but t

[no subject]

2015-05-20 Thread Marty Strong via NANOG
This post was from a subscriber whose From: address domain has a DMARC policy of reject or quarantine. The NANOG mailing list has automatically wrapped this message to prevent other subscribers mail systems from rejecting it.--- Begin Message --- It was resolved at around 2015-05-20 17:18 UTC Rega

Re: Spamhaus BGP feed experiences?

2015-05-20 Thread Matthias Leisi
At dnswl.org we check our data against the DROP list every once in a while. The overlap of DROP with legitimate sources of SMTP traffic is very, very small: a low single-digit number, and most of them are crappy to start with (so we don’t publish them, but only keep them in o

Re: AT&T/Telia issue

2015-05-20 Thread Mel Beckman
There is a massive fiber cut in Santa Barbara affecting coastal paths for some carriers. That might be a factor. -mel beckman > On May 20, 2015, at 7:42 AM, Tyler Applebaum wrote: > > Still seeing this as of 7:40AM PST. Looks isolated to AT&T and Telia in > Seattle. > > HOST: PC-002

Re: Low Cost 10G Router

2015-05-20 Thread Alain Hebert
Well, in my experience, which is limited to small iron mostly. Juniper MX104 Do not forget to get a second RE (Routine Engine) for software upgrade, and be prepare to accept to pay a "license" to use the 10Gbps ports on top of buying the IO cards. (1 license per 2 ports).

Re: Low Cost 10G Router

2015-05-20 Thread Colton Conor
Yep, thats what I meant be ALU 7750 :) On Wed, May 20, 2015 at 12:17 PM, Cody Grosskopf wrote: > Add Alcatel-Lucent 7750? I have no experience but this list seems to love > them. > > On Wed, May 20, 2015, 9:44 AM Colton Conor wrote: > >> So, from the sounds of it most are saying for low cost, t

Re: Low Cost 10G Router

2015-05-20 Thread Baldur Norddahl
ZTE M6000-3S. It is what we use. Works well for us. Just remember to get a memory upgrade to 8 GB memory or you will run out of RIB space. Regards Baldur Den 20/05/2015 18.43 skrev "Colton Conor" : > So, from the sounds of it most are saying for low cost, the way to go would > be a software ro

Re: Low Cost 10G Router

2015-05-20 Thread Cody Grosskopf
Add Alcatel-Lucent 7750? I have no experience but this list seems to love them. On Wed, May 20, 2015, 9:44 AM Colton Conor wrote: > So, from the sounds of it most are saying for low cost, the way to go would > be a software router, which I was trying to avoid. To answer the bandwidth > question,

Re: Low Cost 10G Router

2015-05-20 Thread Mike Hammett
There will *not* be multi-threaded BGP in RouterOS. I was going to refer you to the post I made last night, but due to the unique way the e-mail list is setup, I replied directly to Colton instead of the list. I resent it again to the list. - Mike Hammett Intelligent Computing Solutio

Re: Low Cost 10G Router

2015-05-20 Thread Mike Hammett
Well, the cores on a many-core CPU aren't going to have the "torque" that a Xeon would. They're also still working on the software. It has gotten a ton better over the life of the CCRs thus far. BGP is still atrocious on the CCRs, but that's because the route update process isn't multithreaded.

Re: Low Cost 10G Router

2015-05-20 Thread Blake Hudson
As mentioned by others on the list, a properly configured ASR1004 and up can do this. --Blake Colton Conor wrote on 5/20/2015 11:42 AM: So, from the sounds of it most are saying for low cost, the way to go would be a software router, which I was trying to avoid. To answer the bandwidth questi

Re: Low Cost 10G Router

2015-05-20 Thread Aled Morris
On 20 May 2015 at 17:44, Colton Conor wrote: > So are the rest of the processes in Mikrotik OS multi threaded? I would > hope so to take advantage of 36 cores! > The forthcoming new major software release from Mikrotik apparently will have multi-threaded BGP - it is targetted at their (also fort

Re: Low Cost 10G Router

2015-05-20 Thread Rafael Possamai
Since you are considering multiple options, I'd build a decision matrix. You can put down all the requirements, score each option, and then normalize it to give each a final score. After that you can calculate some other things such as throughput per dollar, etc. http://asq.org/learn-about-quality

Re: Low Cost 10G Router

2015-05-20 Thread Blake Dunlap
good, cheap, built by someone else pick 2 On Wed, May 20, 2015 at 9:42 AM, Colton Conor wrote: > So, from the sounds of it most are saying for low cost, the way to go would > be a software router, which I was trying to avoid. To answer the bandwidth > question, we would have three 10G ports

Re: Low Cost 10G Router

2015-05-20 Thread Thomas Mangin
Hello Pavel, Using ExaBGP as an SDN already has been done (and in a very large scale). But I would agree with Nick; It is not something I would recommend to everyone. Once more to echo Nick, to add/remove route/fw entries on Linux please do use netlink. The lastest ExaBGP master has some sta

Re: Low Cost 10G Router

2015-05-20 Thread Colton Conor
So are the rest of the processes in Mikrotik OS multi threaded? I would hope so to take advantage of 36 cores! What is up with all of these network vendors not supporting more than one core in their OS? I just don't get it. On Tue, May 19, 2015 at 9:49 PM, Josh Baird wrote: > The BGP daemon o

Re: Low Cost 10G Router

2015-05-20 Thread Colton Conor
So, from the sounds of it most are saying for low cost, the way to go would be a software router, which I was trying to avoid. To answer the bandwidth question, we would have three 10G ports with three different carriers and at max push 10Gbps of total traffic to start. I think this leaves me with

Re: Low Cost 10G Router

2015-05-20 Thread Pavel Odintsov
Hello! Yes, we could run route add / route del when we got any announce from external world with ExaBGP directly. I have implemented custom custom Firewall (netmap-ipfw) management tool which implement in similar manner. But I'm working with BGP flow spec. It's so complex, standard BGP is much tim

Re: Low Cost 10G Router

2015-05-20 Thread Nick Hilliard
On 20/05/2015 15:25, Aled Morris wrote: > Couldn't your back-end scripts running under ExaBGP also manage the FIB, > using standard Unix tools/APIs? > > Managing the FIB is basically just "route add" and "route delete" right? Yes, you could probably do this. No, you probably wouldn't want to do

RE: AT&T/Telia issue

2015-05-20 Thread Tyler Applebaum
Still seeing this as of 7:40AM PST. Looks isolated to AT&T and Telia in Seattle. HOST: PC-002Loss% Snt LastAvg Best Wrst StDev 1.|-- 172.31.255.1 0.0% 10 00.803 0.9 2.|-- 10.98.0.4 0.0% 10

Re: Low Cost 10G Router

2015-05-20 Thread charles
On 2015-05-20 08:17, Pavel Odintsov wrote: Hello! Ray, I could suggest switch from multi physical CPU configuration to single. Like Intel Xeon E5-1650/1660/1680 or even Xeon E3 platforms. Because multi processor systems need really huge amount of knowledge for NUMA configuration and PCI-E device

Re: Low Cost 10G Router

2015-05-20 Thread Aled Morris
On 20 May 2015 at 15:00, Pavel Odintsov wrote: > Yes, you could do filtering with Quagga. But Quagga is pretty old tool > without multiple dynamic features. But with ExaBGP you could do really > any significant route table transformations with Python in few lines > of code. But it's definitely ad

Re: Low Cost 10G Router

2015-05-20 Thread Pavel Odintsov
Yes, you could do filtering with Quagga. But Quagga is pretty old tool without multiple dynamic features. But with ExaBGP you could do really any significant route table transformations with Python in few lines of code. But it's definitely add additional point of failure/bug. On Wed, May 20, 2015

Re: Low Cost 10G Router

2015-05-20 Thread Nick Hilliard
On 20/05/2015 14:56, Pavel Odintsov wrote: > Yes, right! But ExaBGP could receive full BGP table, drop some rules > and reflect they to Quagga which could load FIB on the Cumulus. or you could not bother with exabgp and do your route filtering on quagga. Nothing wrong with exabgp, btw. Great pro

Re: Low Cost 10G Router

2015-05-20 Thread Pavel Odintsov
Yes, right! But ExaBGP could receive full BGP table, drop some rules and reflect they to Quagga which could load FIB on the Cumulus. On Wed, May 20, 2015 at 4:53 PM, Nick Hilliard wrote: > On 20/05/2015 14:46, Pavel Odintsov wrote: >> We could cut full BGP and select only important prefixes with

Re: Low Cost 10G Router

2015-05-20 Thread Nick Hilliard
On 20/05/2015 14:46, Pavel Odintsov wrote: > We could cut full BGP and select only important prefixes with ExaBGP. exabgp is rib mgmt only and doesn't program the fib. you will need quagga / bird / etc for this. Nick

Re: Low Cost 10G Router

2015-05-20 Thread Pavel Odintsov
We could cut full BGP and select only important prefixes with ExaBGP. On Wed, May 20, 2015 at 4:41 PM, Nick Hilliard wrote: > On 20/05/2015 14:32, Cody Grosskopf wrote: >> I haven't tried myself but some of the stuff Cumulus Linux is doing is >> pretty amazing, not certain quagga can or should ha

Re: Low Cost 10G Router

2015-05-20 Thread Pavel Odintsov
I have tried Cumulus. It's awesome! :) You definitely could run Quagga, Bird or even ExaBGP https://github.com/Exa-Networks/exabgp and build full feature router from 10GE switch. On Wed, May 20, 2015 at 4:32 PM, Cody Grosskopf wrote: > I haven't tried myself but some of the stuff Cumulus Linux is

Re: Low Cost 10G Router

2015-05-20 Thread Nick Hilliard
On 20/05/2015 14:32, Cody Grosskopf wrote: > I haven't tried myself but some of the stuff Cumulus Linux is doing is > pretty amazing, not certain quagga can or should handle full bgp table but > you could probably get a Penguin 10gbe for less than 8k. quagga (or whatever RIB manager you want, e.g.

Re: Low Cost 10G Router

2015-05-20 Thread Cody Grosskopf
I haven't tried myself but some of the stuff Cumulus Linux is doing is pretty amazing, not certain quagga can or should handle full bgp table but you could probably get a Penguin 10gbe for less than 8k. On Tue, May 19, 2015, 10:25 AM Colton Conor wrote: > What options are available for a small,

Re: Low Cost 10G Router

2015-05-20 Thread Pavel Odintsov
Hello! Ray, I could suggest switch from multi physical CPU configuration to single. Like Intel Xeon E5-1650/1660/1680 or even Xeon E3 platforms. Because multi processor systems need really huge amount of knowledge for NUMA configuration and PCI-E devices assignment for each NUMA. Secondly, I coul

Re: Low Cost 10G Router

2015-05-20 Thread Ray Soucy
P.S I went through HotLava Systems for the Intel-based SFP+ NICs to add to those, http://hotlavasystems.com/ (not trying to plug; these are just hard to find) On Wed, May 20, 2015 at 9:08 AM, Ray Soucy wrote: > You're right I dropped down to the v2 for pricing reasons: > > - Supermicro SuperServ

Re: Low Cost 10G Router

2015-05-20 Thread Ray Soucy
You're right I dropped down to the v2 for pricing reasons: - Supermicro SuperServer 5017R-MTRF - 4x SATA - 8x DDR3 - 400W Redundant - Eight-Core Intel Xeon Processor E5-2640 v2 2.00GHz 20MB Cache (95W) - 4 x SAMSUNG 2GB PC3-12800 DDR3-160 - 2 x 500GB SATA 6.0Gb/s 7200RPM - 3.5" - Western Digital R

Re: Low Cost 10G Router

2015-05-20 Thread Eduardo Meyer
On Tuesday, May 19, 2015, Warsaw wrote: > > > On May 19, 2015, at 10:22, Colton Conor > wrote: > > > > > > What options are available for a small, low cost router that has at > least > > > four 10G ports, and can handle full BGP routes? All that I know of are > the > > > Juniper MX80, and the Bro

Re: Measuring DNS Performance & Graphing Logs

2015-05-20 Thread Denis Fondras
> I was wondering which tool(s) can I use to measure the performance of my 3 > DNS servers (1 primary, 1 secondary, 1 solely cacheDNS)? From the stats I > would like to know if my DNS server is serving as it should be or if any of > it's options are set inappropriately and others alike. Perhaps ht

Re: Measuring DNS Performance & Graphing Logs

2015-05-20 Thread Andrew Smith
Smokeping (http://oss.oetiker.ch/smokeping/) can graph DNS response latency via dig. ThousandEyes (https://www.thousandeyes.com/) has some commercial options for monitoring DNS server responsiveness, and zone performance from different vantage points throughout the globe. On Tue, May 19, 2015 a