Re: New vyatta-nsp list

2011-05-27 Thread Adrian Chadd
On Fri, May 27, 2011, George Bonser wrote: > > It's actually rather hard with current pc hardware to get to multiple > > cores engaged in paralell per input interfaces. while you can plan for > > various cases the the one to account for is the small packet > > performance not overwhelming the capa

RE: New vyatta-nsp list

2011-05-27 Thread George Bonser
> > Every tool has its use. Also, they have several different sized > > appliances. How much CPU use you get depends on how many cores you > > throw at the problem. They can use multiple cores/processors. The > > result given in one test might not match someone else's test if they > > have hig

Re: New vyatta-nsp list

2011-05-27 Thread Joel Jaeggli
On May 24, 2011, at 7:52 PM, George Bonser wrote: >> The graphs show near 100% CPU usage at small packet sizes, and low >> PPS. That would lead to a pretty easy to launch DDoS against a >> software based router platform. >> Since there isn't a separation between control plane/forwarding plane, >>

Re: New vyatta-nsp list

2011-05-24 Thread sthaug
> 1gige linerate: 1,9mpps > 10gige linerate: 19mpps > > and intel is proud to achieve 1,6mpps at 2 10gige cards? > I have seen higher values at pc hardware - but still not compareable to > asics. If you're going to specify line rate pps, please get the figures right. Line ra

RE: New vyatta-nsp list

2011-05-24 Thread George Bonser
> The graphs show near 100% CPU usage at small packet sizes, and low > PPS. That would lead to a pretty easy to launch DDoS against a > software based router platform. > Since there isn't a separation between control plane/forwarding plane, > an attacker could trivially take you offline. I'd imagin

Re: New vyatta-nsp list

2011-05-24 Thread Robert Bays
On 5/24/11 3:25 PM, Ingo Flaschberger wrote: > >> I won't argue that an ASIC isn't faster, but it is hard to argue that >> Vyatta >> isn't capable of high-end performance. >> >> http://download.intel.com/embedded/processor/solutionbrief/322973.pdf > > aeh - mpps - mega packets per second - is rea

Re: New vyatta-nsp list

2011-05-24 Thread Brent Jones
On Tue, May 24, 2011 at 2:54 PM, Jon Bane wrote: > On Tue, May 24, 2011 at 5:26 PM, Brent Jones wrote: >> >> >> Well, with the new Juniper entry level MX devices out now, the cost >> difference between Vyatta and Juniper is probably insignificant now, >> and with Juniper devices, you have much hi

Re: New vyatta-nsp list

2011-05-24 Thread Ingo Flaschberger
I won't argue that an ASIC isn't faster, but it is hard to argue that Vyatta isn't capable of high-end performance. http://download.intel.com/embedded/processor/solutionbrief/322973.pdf aeh - mpps - mega packets per second - is really low. and the gbps scale in figure 4 is wrong - factor 10 t

Re: New vyatta-nsp list

2011-05-24 Thread Jon Bane
On Tue, May 24, 2011 at 5:26 PM, Brent Jones wrote: > > > Well, with the new Juniper entry level MX devices out now, the cost > difference between Vyatta and Juniper is probably insignificant now, > and with Juniper devices, you have much higher PPS rate. > > Granted, I have Vyatta devices now doi

Re: New vyatta-nsp list

2011-05-24 Thread Joel Jaeggli
On May 24, 2011, at 2:26 PM, Brent Jones wrote: > > Well, with the new Juniper entry level MX devices out now, the cost > difference between Vyatta and Juniper is probably insignificant now, > and with Juniper devices, you have much higher PPS rate. > > Granted, I have Vyatta devices now doing B

Re: New vyatta-nsp list

2011-05-24 Thread Joel Jaeggli
On May 24, 2011, at 12:56 PM, valdis.kletni...@vt.edu wrote: > On Tue, 24 May 2011 14:42:02 CDT, Rhys Rhaven said: >> I had a Juniper sales rep laugh at me when I asked for a comparison of >> their SRX series to Vyatta, as he had "never heard of Vyatta." > > "Danger, Will Robinson! Danger!" :)

Re: New vyatta-nsp list

2011-05-24 Thread Brent Jones
On Tue, May 24, 2011 at 12:42 PM, Rhys Rhaven wrote: > I had a Juniper sales rep laugh at me when I asked for a comparison of > their SRX series to Vyatta, as he had "never heard of Vyatta." > > Anyone have an opinion on Vyatta's software/appliances? Specifically > their 3520 ? > > > On 05/24/2011

Re: New vyatta-nsp list

2011-05-24 Thread Valdis . Kletnieks
On Tue, 24 May 2011 14:42:02 CDT, Rhys Rhaven said: > I had a Juniper sales rep laugh at me when I asked for a comparison of > their SRX series to Vyatta, as he had "never heard of Vyatta." "Danger, Will Robinson! Danger!" :) pgpSSr1Ct0Nkg.pgp Description: PGP signature

Re: New vyatta-nsp list

2011-05-24 Thread Rhys Rhaven
I had a Juniper sales rep laugh at me when I asked for a comparison of their SRX series to Vyatta, as he had "never heard of Vyatta." Anyone have an opinion on Vyatta's software/appliances? Specifically their 3520 ? On 05/24/2011 10:59 AM, Michael K. Smith - Adhost wrote: > Hello All: > > There