nexus N3K-C3064PQ vs juniper ex4500 in order to protect against ddos
Saku Ytti
saku at ytti.fi
Fri Sep 30 20:06:13 UTC 2016
On 30 September 2016 at 22:42, Pedro <piotr.1234 at interia.pl> wrote:
Hey Pedro,
> I have some idea to put switch before bgp router in order to terminate isp
> 10G uplinks on switch, not router. Main reason is that could be some kind of
> 1st level of defence against ddos, second reason, less important, save cost
> of router ports, do many port mirrors.
I don't understand your rationale, unless your router is software box,
but as it has 10G interface, probably not.
Your router should be able to limit packets in HW, likely with better
counter and filtering options than cheap switch.
--
++ytti
More information about the NANOG
mailing list