- NANOG - lists.nanog.org

Need recommendations for high-feature, high-density L3 Switch
by Cliff Bowles 10 Feb '15

10 Feb '15

We have some aging infrastructure and need to start budgeting next-gen. * The network has several small routers as individual edges to peers, WAN, SIP services. * It has a couple 6509s as Internet edge (full tables, 2 carriers, no transit, simple policies) * It has some Nexus 7K as an aggregation layer for all the server pods * It has some 6509s as a backbone to interconnect the aggregation layers and inter-site links. * We do run VRFs/MPLS across our backbone with L3, L2 and L1 services. Nothing super fancy, but it's a requirement. Two approaches: 1 - Look at ASR9010 (or something similar) to replace all of the above. Pros: It has the density, it has features, port buffers, seems to have good granular virtualization, seems to have a good reputation amongst heavy users. Cons: It is very expensive fully populated and there is some oversubscription on the higher-density cards. 2 - Look at one solution to consolidate all edge routers and a separate solution to consolidate backbone/aggregation. Pros: Less density required at the edge layers, so a cheaper solution is possible; Not requiring full BGP tables and port buffers at the backbone/agg layer widens the selection a LOT considering the number of vendors with high-feature/high-density L3 switches. Cons: Now we are looking at 4 boxes per data center rather than 2. So... Is there something in the same class as the ASR9000s that also have a good reputation? Will need at least 48 ports of 10G, 24x1Gb, limited oversubscription, good feature sets, not astronomically priced. If we can't find the perfect fit, we will just look at two separate solutions. Also... has anyone used a CSR1000v or Vyatta VM-based solution on something like a Pluribus? I know you can run them on any server, but there are vendors like Pluribus who integrate the server hardware with a full-feature physical switch. (Their E68 is the one we are considering) I'm assuming you aren't going to get anywhere near the features and performance of an ASR9010, but... can you get close? Thanks. CWB

5 5

UVerse question
by TR Shaw 10 Feb '15

10 Feb '15

Any suggestions on what to tell ATT to get IPv6 added to a current account and upgrade a 2wire router to 4wire with halfway decent performance and capability? Any and all help would be appreciated. Tom

6 5

mpls over microwave
by Scott Weeks 09 Feb '15

09 Feb '15

Anyone doing MPLS over microwave radios? Please share your experiences on list or off. scott

12 12

Has anyone imagined what could be the future HCI
by lobna gouda 09 Feb '15

09 Feb '15

Has anyone imagined this? away on increasing processing power or visual clearance of what we already have, what could be the next HCI?

3 4

[request]: host a probe for v6 measurements
by Bajpai, Vaibhav 09 Feb '15

09 Feb '15

Dear NANOG, We are currently looking for volunteers in US with native IPv6 lines to help us in our v6 measurement research. <——------ Background We are interested in measuring IPv6 performance from home. As part of the LEONE project [1], we have developed measurement tests that compare performance over IPv4 and IPv6 to: a) Dual-stacked websites and b) YouTube content delivery network (in collaboration with Aalto University). The tests comes bundled with a LEONE SamKnows probe. [1] http://www.leone-project.eu We currently have ~25 Vantage points (VP). Each VP runs a Leone SamKnows probe. The google map [2] shows where these probes are deployed. As you can see the VP sample is too small (nothing in North America) [2] http://goo.gl/TL4woP <——------ Request: If you receive native IPv6 at home (or know someone who does), it would be great if you can host a LEONE SamKnows probe for us. The probe will run standard SamKnows tests [3] and our IPv6 tests. [3] https://www.samknows.com/tests-and-metrics We prefer measuring from home networks, but are also open to deploying probes within research/academic networks, business lines, or operators labs. <-------- Action: Let me know if you’re interested, and I can share details on how to get the probe to you. We only have limited number of LEONE SamKnows probes. We will process the requests on first come first serve basis. <-------- Research Impact. a) Measuring YouTube from Dual-Stacked Hosts Saba Ahsan, Vaibhav Bajpai, Jörg Ott, Jürgen Schönwälder Passive and Active Measurement Conference (PAM 2015), New York, March 2015. b) Measuring TCP Connection Establishment Times of Dual-Stacked Web Services Vaibhav Bajpai, Jürgen Schönwälder 9th International Conference on Network and Service Management, (CNSM 2013) Zürich, October 2013. 8<——-- Thanks. Thank you so much for helping us in our research activity. Best, Vaibhav ===================================================== Vaibhav Bajpai Research I, Room 91 Computer Networks and Distributed Systems (CNDS) Lab School of Engineering and Sciences Jacobs University Bremen, Germany www.vaibhavbajpai.com =====================================================

3 4

Dynamic routing on firewalls.
by David Jansen 09 Feb '15

09 Feb '15

Hi, We have used dynamic routing on firewall in the old days. We did experience several severe outages due to this setup (OSPF en Cisco). As you will understand i’m not eager to go back to this solution but I am curious about your point of views. Is it advisory to so these days? Kind regards, David

18 29

Provider to Blend with Level3
by Colton Conor 09 Feb '15

09 Feb '15

We have a network that is single homed with Level3 at this time in Dallas. They already have BGP and their own ASN and IP setup. Who would you recommend for a second provider in Dallas to blend with Level3? Assuming Level3 and this other provider would be the only two in the blend for a long time to come? Client was talking to TWT, but now that they are being bought by Level3 that doesn't make much sense.

7 6

Checkpoint IPS
by Michael Hallgren 08 Feb '15

08 Feb '15

Hi, Someone has positive or negative experience running Checkpoint IPS cluster over ``long distance'' synch. network? Real life limitations? Alternatives? Timers? Cheers, mh

18 54

suny.edu / ASN54226 anyone? please contact me off-list
by BPNoC Group 08 Feb '15

08 Feb '15

Someone from Sunynet? Please contact-me off list to clarify if you are BGP transit to to a certain ASN spoofing my CIDR or if bgp as-path is artificially messed. Tried contact on sunny(a)suny.edu w/o success.

1 0

scaling linux-based router hardware recommendations
by micah anderson 08 Feb '15

08 Feb '15

Hi, I know that specially programmed ASICs on dedicated hardware like Cisco, Juniper, etc. are going to always outperform a general purpose server running gnu/linux, *bsd... but I find the idea of trying to use proprietary, NSA-backdoored devices difficult to accept, especially when I don't have the budget for it. I've noticed that even with a relatively modern system (supermicro with a 4 core 1265LV2 CPU, with a 9MB cache, Intel E1G44HTBLK Server adapters, and 16gig of ram, you still tend to get high percentage of time working on softirqs on all the CPUs when pps reaches somewhere around 60-70k, and the traffic approaching 600-900mbit/sec (during a DDoS, such hardware cannot typically cope). It seems like finding hardware more optimized for very high packet per second counts would be a good thing to do. I just have no idea what is out there that could meet these goals. I'm unsure if faster CPUs, or more CPUs is really the problem, or networking cards, or just plain old fashioned tuning. Any ideas or suggestions would be welcome! micah

34 46