Re: FBSD 1GBit router?

2008-03-03 Thread Łukasz Bromirski
Wouldn't it be a case for use of multicast vs unicast? Hardware is always better anyway, so why not invest in some switch that can do unicast/multicast in hardware? -- "Don't expect me to cry for all the | Łukasz Bromirski reasons you had to die&

Re: FBSD 1GBit router?

2008-03-03 Thread Łukasz Bromirski
Willem Jan Withagen wrote: Łukasz Bromirski wrote: Willem Jan Withagen wrote: I'm looking for a stream exploder.:) 1 2Mbit stream in, and as many as possible out. And 7*1Gb = 14Gbit, so I'd like to be pushing 7000 streams. (One advantage is that they will be UDP streams, so there i

Re: fooling nmap

2004-09-04 Thread Łukasz Bromirski
d the "I want Your disk-space" kid will try his SSH exploits with automated script whatever the fingerprint will be? [1]. http://www.oreilly.com/catalog/1593270461/ -- this space was intentionally left blank| Łukasz Bromirski you

OpenBGPd?

2004-11-12 Thread Łukasz Bromirski
Hi, Is anyone working on a port of OpenBGPd, or current version of Quagga (0.97.3)? -- this space was intentionally left blank| Łukasz Bromirski you can insert your favourite quote here | lukasz:bromirski,net

Re: OpenBGPd?

2004-12-21 Thread Łukasz Bromirski
ally left blank| Łukasz Bromirski you can insert your favourite quote here | lukasz:bromirski,net ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: ipfilter 4.1.6 won't build on FreeBSD5.3 amd64 (fwd)

2005-03-08 Thread Łukasz Bromirski
Goran Gajic wrote: Actually I was interested if Dual Opteron with FBSD5.3 can compare with Cisco7206 with NPE-G1 running only for NAT You'll need good motherboard, NICs, 1-2GB of RAM and quite capable CPU. Two won't help much, but sometimes the motherboards for two CPUs provide higher standard (sep

Re: ipfilter 4.1.6 won't build on FreeBSD5.3 amd64 (fwd)

2005-03-09 Thread Łukasz Bromirski
Hi Goran, On my NPE-G1 running just IOS 12.3(12a) cpu utilization was something like 70-90% but with IOS 12.3(11)T3 it is 20% since this one has NAT inside CEF Yes, exactly. However if you compare prices of PC hardware and Cisco hardware > decent PC hardware with FBSD seems like more acceptable s

Re: ipfilter 4.1.6 won't build on FreeBSD5.3 amd64 (fwd)

2005-03-09 Thread Łukasz Bromirski
Tony Sarendal wrote: None of our 7200's will come anyway near those numbers. Are you sure it's cisco you are using =) ;) I can't argue for any 7200 in any situation, but again let me repeat, that the numbers I gave are for pure, fast-switched/CEFed routing. I think this discussion should migrate to

Re: OpenBGPD with FreeBSD

2005-03-20 Thread Łukasz Bromirski
left blank| Łukasz Bromirski you can insert your favourite quote here |lukasz:bromirski,net ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reverse Path Filtering check in ip_input.c

2006-01-02 Thread Łukasz Bromirski
one wiser than me to review the code and 'update' ip_input.c code? -- this space was intentionally left blank|Łukasz Bromirski you can insert your favourite quote here |lukasz:bromirski,net ___ freebsd-net@freebs

Re: Reverse Path Filtering check in ip_input.c

2006-01-02 Thread Łukasz Bromirski
Łukasz Bromirski wrote: Patch applies cleanly on ip_input.c version 1.301.2.3 dated 2005/10/09 (latest RELENG_5 checkout). It will also work with latest RELENG_4 checkout (ip_input.c version 1.130.2.55 dated 2005/01/02). Sorry for small mistake - patch applies cleanly to: ip_input.c

Re: Reverse Path Filtering check in ip_input.c

2006-01-03 Thread Łukasz Bromirski
ng rework of network code I'm sure we'll have it sooner or later and then maybe someone will revise old checks already marked as 'XXX' in the code ;) -- this space was intentionally left blank|Łukasz Bromirski you can insert your fav

Re: Reverse Path Filtering check in ip_input.c

2006-01-03 Thread Łukasz Bromirski
e's always someone who has to do first step... ;) -- this space was intentionally left blank |Łukasz Bromirski you can insert your favourite quote here |lukasz:bromirski,net ___ freebsd-net@freebsd.org mailing list http://lis

Re: Multiple routes to the same destination

2006-06-25 Thread Łukasz Bromirski
DDoS threats - Linux already did that in 2.6.x, as there an option to compile kernel with either FIB_HASH or FIB_TRIE. -- "Confidence is what you have before you| Łukasz Bromirski understand the problem." -- Woody Allen |lukasz:bromirski,net _