nanog mailing list archives

Re: Vyatta as a BRAS


From: "Dobbins, Roland" <rdobbins () arbor net>
Date: Wed, 14 Jul 2010 02:18:18 +0000


On Jul 14, 2010, at 3:26 AM, Tony Li wrote:

The whole point about being DoS resistant is one of horsepower.  To do DoS protection correctly, you need to be able 
to do packet examination at line rate.

Right.  And to date, such routers make use of ASICs - i.e., 'hardware-based' routers, in the vernacular.  

Routers which use only centralized, general-purpose processors can't handle even a fraction of 'line-rate' without 
tanking, as innumerable real-world examples of said behavior over the years have repeatedly and conclusively 
demonstrated.

;>

-----------------------------------------------------------------------
Roland Dobbins <rdobbins () arbor net> // <http://www.arbornetworks.com>

    Injustice is relatively easy to bear; what stings is justice.

                        -- H.L. Mencken





Current thread: