On Jun 9, 2009, at 5:00 PM, Roland Dobbins wrote:
On Jun 10, 2009, at 6:41 AM, Maxwell Reid wrote:
It's using them in combination with vShield Zones at the ESX level
(new feature of v4) that yields the best results.
It's also important to note that all of this runs in software, and
is thus subject to the performance limitations thereof.
When you're talking about a box with 16-32 3 Ghz Cores and 128 GBs of
ram with offloading NIC/CNA's that "software" is pretty speedy. A
single host running 3 vms can go as high as 350,000 IOPs/sec from a
storage perspective, and handle high PPS loads w/ 10GbE at line rate.
Even "hardware" appliances like the ASA boot strap off what appears to
be KVM and handle multiple contexts in software; and you really only
need specialized ASIC's as part of the forwarding plane of high end
routers.
~Max
-----------------------------------------------------------------------
Roland Dobbins <[email protected]> // <http://www.arbornetworks.com>
Unfortunately, inefficiency scales really well.
-- Kevin Lawton
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
