Re: So what's the deal with 10Gbase-T

2012-10-01 Thread Andreas Echavez
Mostly backwards compatibility; simplicity. We're planning for some super-high-density virtualization/storage projects mixed in with lower bandwidth gear, and sticking to one type of cable for everything would be convenient. I thought DAC had some distance limitations as well. This is all speculat

So what's the deal with 10Gbase-T

2012-10-01 Thread Andreas Echavez
Hey guys, Does anyone here have experience running copper 10Gbase-T networks? It seems like the standard just died out. For us it would make a lot of sense for our applications -- even if throughput and latency aren't as great. If anyone out there knows of any *copper* 10 gig-t switches (48 port?)

Re: Common operational misconceptions

2012-02-16 Thread Andreas Echavez
I'm surprised I haven't seen QoS mentioned! If you're teaching college students, you might want to go over stuff that directly relates to what they're doing at home, or misconceptions they might make in a small WAN/ISP environment. *Why disabling ICMP doesn't increase security and only hurts the w

Re: Outsourcing DDOS

2011-10-24 Thread Andreas Echavez
> > Unfortunately it's not a simple task to test several hundred gigabytes of > mitigation capacity. > > Correction... Meant gigabits -- we're not at that point yet ;) -A

Re: Outsourcing DDOS

2011-10-24 Thread Andreas Echavez
On Mon, Oct 24, 2011 at 4:45 PM, Brett Watson wrote: > On Oct 24, 2011, at 10:54 AM, Andreas Echavez wrote: > > > Prolexic is the go-to company for handling large-scale DDoSes. We haven't > > yet tried the service, but they've been extremely professional. > > No

Re: Outsourcing DDOS

2011-10-24 Thread Andreas Echavez
< sfou...@shortestpathfirst.net> wrote: > On 10/24/2011 1:54 PM, Andreas Echavez wrote: > > obviously they will get blocked. My personal experience is that when >> you're >> dealing with a DoS at the scale that you need Prolexic, there is simply no >> one el

Re: Outsourcing DDOS

2011-10-24 Thread Andreas Echavez
We've dealt with these guys too too. There are lots of providers; I've used ones through ISPs and they can work well. Our only issue is that the ISP we were talking with only had XYZ Gb of mitigation, and Prolexic has a ton more capacity (in the hundreds of gigabits when I last checked). Prolexic

Re: vyatta for bgp

2011-09-21 Thread Andreas Echavez
I'll chime in, In an enterprise environment, I've worked with software routers as well as hardware beasts (ala Junipers, Cisco 6500s, ASAs, and more). Ultimately, the network is as reliable as you build it. With software, it's much cheaper to divide and scale horizontally. Hardware devices are ex

Re: Experience with Open Source load balancers?

2011-05-18 Thread Andreas Echavez
We're using both an F5 BigIP as well as Nginx (open source software) in a production environment. They both have their merits, but when we recently came under some advanced DDoSes (slowloris, slow POST, and more), we couldn't process certain types of layer 7 insepction/modification because it was