Re: Aftermarket switches that were manufactured in any sort of quantity?

2022-06-09 Thread Joelja Bogus


Sent from my iPhone

> On Jun 9, 2022, at 09:44, Drew Weaver  wrote:
> 
> 
> Hello,
>  
> We had been purchasing some used 48 port 1BaseT switches /w 6x QSFP28 
> ports for around $3000 until about 2021.

You didn’t specify the chipset or feature / character of these devices, but I 
would assume based on the time frame that these are dune arad or Broadcom 
tomahawk. These are both obsolete and still in fairly high demand and the 
follow on chipsets eg tomahawk 2 trident 3 jericho and so on are both more 
feature rich and more modern and are therefore in high demand. Since people are 
not swapping out equipment they cannot replace, the secondary market is not 
getting the last generation hardware. If you buy new high end 100 and 400 gig 
tor switch chipsets in meaningful quantities you’ll be seeing lead times of 
like a year. 

The used car market is experiencing a similar condition.

>  
> In 2021 the aftermarket pricing went from $3,000 each to $15,000 each.
>  
> Now these particular switches are selling for $20,000 each (and people are 
> still buying them[?]…)
>  
> Obviously I cannot pay $20k for a used switch so I am trying to find 
> alternatives that perhaps aren’t as rare.
>  
> I’m trying to determine whether this pricing is just based on the model I am 
> trying to buy or if it is basically every switch from every MFG.
>  
> Just trying to see if anyone else has had any luck getting any hardware at 
> around a fair price lately?

Fair is subject  to personal preference and local conditions. The people who 
would like new switches cannot in some case buy them at any price.

>  
> I’m aware of the macro-economic environment, inflation, chip shortages, etc.. 
> Just looking for another option.
>  
> Thanks,
> -Drew
>  


Re: Cisco Nexus 3k Route Selection\Packet Forwarding Debugging

2023-04-16 Thread Joelja Bogus
Sent from my iPhoneOn Apr 16, 2023, at 10:05, Mike Hammett  wrote:We did have our common upstream provider perform maintenance that then afterwards, had the traffic flowing on the right path. Later activity on our direct connection pushed it back to the common upstream. We haven't yet had the opportunity to bump our BGP session with the common upstream provider, but I suspect that will put the traffic back onto the right path. Seems like the router is just hanging onto the oldest BGP session it has, regardless of any other parameter or configuration.This seems like a bug. We do intend on upgrading NX-OS, but that's on someone else's schedule.Not that familiar  with nexus 3k but I would compare the route in the rib and that on the module.  If the platform is exhausting unicast route entries the control plan may  show the route when  module / asic doesn’t have it installed. It’s not always obviously when these things run out of tcam https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/9-x/unicast/configuration/guide/l3_cli_nxos/l3_manage-routes.pdfThis is nexus 9k  But I would expect it to be broadly similar  in terms of diagnostic on the other platformsNexus 3ks are Broadcom merchant silicon (trident/tomahawk so I’d expect the them to run out of fib in the mid tens of thousands of routes..-Mike HammettIntelligent Computing SolutionsMidwest Internet ExchangeThe Brothers WISPFrom: "Mike Hammett" To: "NANOG" Sent: Monday, April 3, 2023 12:21:29 AMSubject: Cisco Nexus 3k Route Selection\Packet Forwarding DebuggingWe have a Nexus 3064 that is setup with partial BGP tables and is routing based on that. I've done a show ip bgp for an IP of interest and it has an expected next hop IP. I show ip arp on that next hop IP and it has the expected interface. However, sFlows show the packets leaving on a different interface, the one that would carry the default route for routes not otherwise known. If the next hop IP is expected and the ARP of that next hop IP is expected, why are packets leaving out an unexpected interface? -Mike HammettIntelligent Computing Solutionshttp://www.ics-il.comMidwest-IXhttp://www.midwest-ix.com

Re: constraining RPKI Trust Anchors

2023-10-12 Thread Joelja Bogus


Sent from my iPhone

> On Oct 11, 2023, at 15:29, Randy Bush  wrote:
> 
> 
>> 
>> So while each RP should be able to make policy decisions based on its
>> own local criteria, managing a default set of constraints is something
>> that is best done centralized. Who do you envision should manage these
>> lists? RP software maintainers? RIRs? Others?
> 
> and how will this pain-to-maintain list be distributed?  how do i know
> a copy is authentic not an attack?
> 
> i am all for a single root of trust.  it's just that i thought it was
> the iana's job.  but i am easily confused.

Not clear to me how IANA constrains the behavior of the rirs either now or in 
the future. 

> randy
>