100G L2 Service (USA x Europe)

2024-10-22 Thread Erick Nascimento via NANOG
Hello everyone, Huge Networks is looking for 100G L2 service between Equinix Ashburn (or NYC Metro area) to any datacenter in the London or Frankfurt Metro Area. Please contact me offline if you offer this type of service. -- Erick Nascimento Contact: +55 11 3090-4441 | +55 11 94775-9570 Av

Re: IEEE MACsec

2024-10-22 Thread Dave Cohen
I would caution anyone running MACsec on a link leveraging a provider circuit between them to quadruple check that the provider link supports customer use of MACsec. In theory MACsec will operate just fine over a Layer 2 link but carriers tend to not like unanticipated bits get appended or inserted

Re: IEEE MACsec

2024-10-22 Thread Mark Tinka
On 10/22/24 16:56, Tarko Tikan wrote: What we are seeing now is MACsec getting integrated into latest NPUs directly. So far it has been mostly implemented by separate chips or in PHYs (or combination). This has, in some cases, limited you to what ports you can use MACsec on. It also had ch

Re: IEEE MACsec

2024-10-22 Thread Stephen Stuart
If you are going to deploy MACSEC, my advice is test, test, and test, especially (but not only) if you have different vendors' implementations of MACSEC on either end of the link. Test that MACSEC comes up. Test that it recovers from link flaps. Test key rotation. Test recovery from link flaps

Re: IEEE MACsec

2024-10-22 Thread Tarko Tikan
hey, It is not exactly new technology, these devices have existed for +decade now? What we are seeing now is MACsec getting integrated into latest NPUs directly. So far it has been mostly implemented by separate chips or in PHYs (or combination). This has, in some cases, limited you to what

Re: IEEE MACsec

2024-10-22 Thread Brandon Martin
On 10/22/24 00:12, Crist Clark wrote: It is definitely deployed out there. I wouldn't worry too much about reading the specs. All of the implementations I've dealt with are only partial implementations. They almost all are limited to "point to point" functionality. As for comparing to IPsec,