Re: vyatta for bgp

2011-09-26 Thread Scott Weeks
On Mon, Sep 26, 2011 at 3:20 PM, Scott Weeks wrote: > --- r...@maine.edu wrote: > From: Ray Soucy > > We service most of the state's public schools and > libraries (about 1000). Historically the CPE of > choice was a small Cisco ISR (1600,1700, 1800, and > 1900 most recently). As bandwidth l

Re: vyatta for bgp

2011-09-26 Thread Ray Soucy
There are a lot of variables that would skew numbers in favor of using FOSS on commodity hardware in our situation, that wouldn't necessarily apply to others. Primarily because these are used to provide services that are in part funded through the federal E-rate program, and need to comply with re

Re: vyatta for bgp

2011-09-26 Thread Scott Weeks
--- r...@maine.edu wrote: From: Ray Soucy We service most of the state's public schools and libraries (about 1000). Historically the CPE of choice was a small Cisco ISR (1600, 1700, 1800, and 1900 most recently). As bandwidth levels went up, and Ethernet-based transport services became availabl

Re: vyatta for bgp

2011-09-26 Thread Ray Soucy
We service most of the state's public schools and libraries (about 1000). Historically the CPE of choice was a small Cisco ISR (1600, 1700, 1800, and 1900 most recently). As bandwidth levels went up, and Ethernet-based transport services became available, we started looking and leveraging FOSS on

Re: vyatta for bgp

2011-09-25 Thread Bill Shetti
On 9/22/11 11:38 , Charles N Wyble wrote: >* On 09/22/2011 05:37 AM, Pierce Lynch wrote:*>>* Andreas Echavez >[mailto:andreas at livejournalinc.com >] originally wrote:*>>>* >Ultimately, the network is as reliable as you build it. With*>>>* softw

Re: vyatta for bgp

2011-09-22 Thread Scott Whyte
On 9/22/11 11:38 , Charles N Wyble wrote: On 09/22/2011 05:37 AM, Pierce Lynch wrote: Andreas Echavez [mailto:andr...@livejournalinc.com] originally wrote: Ultimately, the network is as reliable as you build it. With software, it's much cheaper to divide and scale horizontally. Hardware devices

Re: vyatta for bgp

2011-09-22 Thread Charles N Wyble
On 09/22/2011 05:37 AM, Pierce Lynch wrote: Andreas Echavez [mailto:andr...@livejournalinc.com] originally wrote: Ultimately, the network is as reliable as you build it. With software, it's much cheaper to divide and scale horizontally. Hardware devices are expensive and usually horizontal sca

RE: vyatta for bgp

2011-09-22 Thread Pierce Lynch
Andreas Echavez [mailto:andr...@livejournalinc.com] originally wrote: > Ultimately, the network is as reliable as you build it. With software, it's > much cheaper to divide and scale horizontally. Hardware devices are expensive > and usually horizontal > scalability never happens. So in reality,

Re: vyatta for bgp

2011-09-21 Thread Charles N Wyble
On 09/21/2011 06:14 PM, Andreas Echavez wrote: btw, you guys might find PacketShadera pretty interesting concept -Andreas Excellent! I was wondering how far along this was. Good to see. Very exciting. I've got a couple parallel systems sitting around l

Re: vyatta for bgp

2011-09-21 Thread Brandon Galbraith
On Wed, Sep 21, 2011 at 4:14 PM, Andreas Echavez wrote: > > The most reliable/cost effective solution is the cheap and redundant > approach to architecture. > > Reliable hardware is incredibly inexpensive, and every year we get better > CPUs and (recently) GPUs that are providing APIs and interfa

Re: vyatta for bgp

2011-09-21 Thread Andreas Echavez
I'll chime in, In an enterprise environment, I've worked with software routers as well as hardware beasts (ala Junipers, Cisco 6500s, ASAs, and more). Ultimately, the network is as reliable as you build it. With software, it's much cheaper to divide and scale horizontally. Hardware devices are ex

Re: vyatta for bgp

2011-09-21 Thread Ask Bjørn Hansen
On Sep 12, 2011, at 11:42, Ben Albee wrote: > Does anybody currently use vyatta as a bgp router for their company? If > so have you ran into any problems with using that instead of a cisco or > juniper router? We're using Vyatta for a handful of fast ethernet links to the internet, with I think

Re: vyatta for bgp

2011-09-15 Thread Ray Soucy
Thanks for the tip, first time I hear this podcast. On Thu, Sep 15, 2011 at 9:58 AM, Jason Leschnik wrote: > Ray > > Download the Podcast "The Packet Pushers - Show 31" they talk a little > about this topic... If nothing else it's a great listen > > Cheers! > > On Thu, Sep 15, 2011 at 11:05 PM, R

Re: vyatta for bgp

2011-09-15 Thread Jason Leschnik
Ray Download the Podcast "The Packet Pushers - Show 31" they talk a little about this topic... If nothing else it's a great listen Cheers! On Thu, Sep 15, 2011 at 11:05 PM, Ray Soucy wrote: > Is Vyatta really not suited for the task? > > I keep checking up on it and holding off looking into it

Re: vyatta for bgp

2011-09-15 Thread Alain Hebert
Hi, As usual this end-up in what people prefer. Vyatta is as good as the hardware it runs on, the backend they use and the people configuring/maintaining it. The nature of ASIC make it more reliable than a multi-purpose device (aka server) running an OS written for it.

Re: vyatta for bgp

2011-09-15 Thread Ray Soucy
Is Vyatta really not suited for the task? I keep checking up on it and holding off looking into it as they don't support multicast yet. Modern commodity sever hardware these days often out-powers big iron enough to make up for not using ASICs, though, at least on the lower end of the spectrum. D

Re: vyatta for bgp

2011-09-13 Thread Dobbins, Roland
On Sep 14, 2011, at 5:54 AM, Deepak Jain wrote: > Some enterprises get MPLS L3 VPN service from their providers, and need boxes > that can route packets to it and speak BGP to inject their routes. They are > not, per se, connected to the Internet, and thus won't be "zorched", at least > in the

RE: vyatta for bgp

2011-09-13 Thread Deepak Jain
In a message written on Mon, Sep 12, 2011 at 06:56:26PM +, Dobbins, Roland wrote: > The days of public-facing software-based routers were over years ago - you > need an ASIC-based edge router, else you'll end up getting zorched. Some enterprises get MPLS L3 VPN service from their providers,

Re: vyatta for bgp

2011-09-13 Thread Leo Bicknell
In a message written on Mon, Sep 12, 2011 at 06:56:26PM +, Dobbins, Roland wrote: > The days of public-facing software-based routers were over years ago - you > need an ASIC-based edge router, else you'll end up getting zorched. Some enterprises get MPLS L3 VPN service from their providers,

Re: vyatta for bgp

2011-09-13 Thread Valdis . Kletnieks
On Mon, 12 Sep 2011 22:38:57 BST, Nick Hilliard said: > Let's throw some figures around (ridiculously simplified): a company has a > choice between a pair of $10k software routers or something like a pair of > MX80s for $25k each. So, one solution costs $20k; the other $50k. $30k > cost differe

Re: vyatta for bgp

2011-09-13 Thread Valdis . Kletnieks
On Mon, 12 Sep 2011 20:48:31 CDT, Jimmy Hess said: > One thing.. the OP was asking about anyone using Vyatta for BGP. > Using Vyatta for BGP doesn't necessarily mean the Vyatta unit is actually a > device > forwarding the packets... someone could be using it as a rou

Re: vyatta for bgp

2011-09-13 Thread Alain Hebert
Hi, In the past, I helped a few small ISP (sub 1Gbps) with software routers setup like Vyatta (Well FreeBSD/64 + Quagga really). Until recently the hardware required to run over 500Mbps + could be as pricey as a pair recycle Cisco 7206VXR since most MBs where coming with only 1

Re: vyatta for bgp

2011-09-13 Thread Tom Hill
On Mon, 2011-09-12 at 15:41 -0400, Jared Geiger wrote: > There was a bug where you couldn't use two IPv4 peers and then add > IPv6. I haven't tested the newest versions yet to see if it still > exists. Works great for two IPv4 peers. Discussion between developers on bugfixes can often be seen in #

Re: vyatta for bgp

2011-09-12 Thread Tony Varriale
On 9/12/2011 3:12 PM, Dobbins, Roland wrote: On Sep 13, 2011, at 2:45 AM, Owen DeLong wrote: In your typical enterprise environment, a 1G DoS will zorch the link long before it zorches the router at the enterprise side. This contradicts my experience - I've repeatedly witnessed only a few mb/

Re: vyatta for bgp

2011-09-12 Thread Jimmy Hess
ask, but there's otherwise nothing wrong with appropriately specc'ed software forwarders. One thing.. the OP was asking about anyone using Vyatta for BGP. Using Vyatta for BGP doesn't necessarily mean the Vyatta unit is actually a device forwarding the packets... someone could be usi

Re: vyatta for bgp

2011-09-12 Thread Robert Bays
> On Sep 13, 2011, at 2:45 AM, Roland Dobbins wrote: > This contradicts my experience - I've repeatedly witnessed only a few mb/sec > of 64-byte packets making software-based routers fall over, including just > last month. It's easy to get 6Mpps using Vyatta or most other software based router

Re: vyatta for bgp

2011-09-12 Thread Nick Hilliard
On 12/09/2011 20:45, Owen DeLong wrote: > In your typical enterprise environment, a 1G DoS will zorch the link long > before it zorches the router at the enterprise side. It sure will, unless you have multiple 1G links into your router, in which case the ddos will effectively trash all the links.

Re: vyatta for bgp

2011-09-12 Thread Martin Millnert
Brent, On Mon, Sep 12, 2011 at 11:13 PM, Brent Jones wrote: > Lots of devices can have trouble if you direct high PPS to the control > plane, and will exhibit performance degradation, leading up to a DoS > eventually. > That isn't limited to software based routers at all, it will impact > dedicat

Re: vyatta for bgp

2011-09-12 Thread Dobbins, Roland
On Sep 13, 2011, at 4:13 AM, Brent Jones wrote: > A high end ASIC can handle millions/tens of millions PPS, but directed > to the control plane (which is often a general purpose CPU as well, > Intel or PowerPC), probably not in most scenarios. CoPP. --

Re: vyatta for bgp

2011-09-12 Thread Brent Jones
On Mon, Sep 12, 2011 at 1:52 PM, Dobbins, Roland wrote: > On Sep 13, 2011, at 3:43 AM, Everton Marques wrote: > >> Would Cisco ISR G2 3925E classify as software-based router? > > Yes. > >> Do you expect it to bend itself down under a few Mbps of 64-byte packets? > > Especially if they're directed

Re: vyatta for bgp

2011-09-12 Thread Dobbins, Roland
On Sep 13, 2011, at 3:43 AM, Everton Marques wrote: > Would Cisco ISR G2 3925E classify as software-based router? Yes. > Do you expect it to bend itself down under a few Mbps of 64-byte packets? Especially if they're directed at the router itself, at some point, sure - though the ISR2 certainl

Re: vyatta for bgp

2011-09-12 Thread Ben Albee
Thanks for the all the feed-back. We will only have two ipv4 BGP peers (both 5mb/sec links) to the same ISP. We are doing BGP because we plan to add a second ISP at one of our locations in the future. We are not any near a large enterprise, this will be replacing two DSL lines and a T1.

Re: vyatta for bgp

2011-09-12 Thread Everton Marques
On Mon, Sep 12, 2011 at 5:12 PM, Dobbins, Roland wrote: > On Sep 13, 2011, at 2:45 AM, Owen DeLong wrote: > >> In your typical enterprise environment, a 1G DoS will zorch the link long >> before it zorches the router at the enterprise side. > > This contradicts my experience - I've repeatedly wit

Re: vyatta for bgp

2011-09-12 Thread Dobbins, Roland
On Sep 13, 2011, at 3:34 AM, Chuck Church wrote: > Is the concern over a DDOS aimed against the router itself, or just massive > flows passing through? Yes, but mainly the former. ;> --- Roland Dobbins //

Re: vyatta for bgp

2011-09-12 Thread Valdis . Kletnieks
On Mon, 12 Sep 2011 20:12:43 -, "Dobbins, Roland" said: > This contradicts my experience - I've repeatedly witnessed only a few mb/sec > of 64-byte packets making software-based routers fall over, including just > last > month. On the flip side, there's a *lot* of sites that have to make trad

RE: vyatta for bgp

2011-09-12 Thread Chuck Church
Original Message- From: Dobbins, Roland [mailto:rdobb...@arbor.net] Sent: Monday, September 12, 2011 2:56 PM To: North American Network Operators' Group Subject: Re: vyatta for bgp >zorched. --- Zorch. I l

Re: vyatta for bgp

2011-09-12 Thread Dobbins, Roland
On Sep 13, 2011, at 2:45 AM, Owen DeLong wrote: > In your typical enterprise environment, a 1G DoS will zorch the link long > before it zorches the router at the enterprise side. This contradicts my experience - I've repeatedly witnessed only a few mb/sec of 64-byte packets making software-base

Re: vyatta for bgp

2011-09-12 Thread Owen DeLong
On Sep 12, 2011, at 12:35 PM, Nick Hilliard wrote: > On 12/09/2011 20:08, Michael K. Smith - Adhost wrote: >> How do you come to this conclusion? I think a software-based router for >> enterprise level (let's say on the 1G per provider level) can handle a >> fair amount of zorching. > > I presu

Re: vyatta for bgp

2011-09-12 Thread Jared Geiger
On Mon, Sep 12, 2011 at 2:42 PM, Ben Albee wrote: > Does anybody currently use vyatta as a bgp router for their company? If > so have you ran into any problems with using that instead of a cisco or > juniper router? > > There was a bug where you couldn't use two IPv4 peers and then add IPv6. I ha

Re: vyatta for bgp

2011-09-12 Thread Dobbins, Roland
On Sep 13, 2011, at 2:08 AM, Michael K. Smith - Adhost wrote: > How do you come to this conclusion? Unhappy experiences. ;> > I think a software-based router for enterprise level (let's say on the 1G > per provider level) can handle a fair amount of zorching. My experiences indicates otherwi

Re: vyatta for bgp

2011-09-12 Thread Nick Hilliard
On 12/09/2011 20:08, Michael K. Smith - Adhost wrote: > How do you come to this conclusion? I think a software-based router for > enterprise level (let's say on the 1G per provider level) can handle a > fair amount of zorching. I presume by "a fair amount", I presume you mean "barely any"? At la

RE: vyatta for bgp

2011-09-12 Thread Michael K. Smith - Adhost
> -Original Message- > From: Dobbins, Roland [mailto:rdobb...@arbor.net] > Sent: Monday, September 12, 2011 11:56 AM > To: North American Network Operators' Group > Subject: Re: vyatta for bgp > > On Sep 13, 2011, at 1:42 AM, Ben Albee wrote: > > > Doe

Re: vyatta for bgp

2011-09-12 Thread fredrik danerklint
> The days of public-facing software-based routers were over years ago - you > need an ASIC-based edge router, else you'll end up getting zorched. wait, what? -- //fredan

Re: vyatta for bgp

2011-09-12 Thread Dobbins, Roland
On Sep 13, 2011, at 1:42 AM, Ben Albee wrote: > Does anybody currently use vyatta as a bgp router for their company? The days of public-facing software-based routers were over years ago - you need an ASIC-based edge router, else you'll end up getting zorched. ---

vyatta for bgp

2011-09-12 Thread Ben Albee
Does anybody currently use vyatta as a bgp router for their company? If so have you ran into any problems with using that instead of a cisco or juniper router?