I don't need no stinking firewall!

Dobbins, Roland rdobbins at arbor.net
Sat Jan 9 02:11:57 UTC 2010

On Jan 9, 2010, at 7:52 AM, Joel Jaeggli wrote:

> see my post in the subject, a reasonably complete performance report for the device is a useful place to start. 

The problem is that one can't trust the stated vendor performance figures, which is why actual testing is required.  I've seen instances in which actual performance is 5% or less of vendor assertions (i.e., vendor constructed a highly artificial scenario in order to be able to make a specific claim which doesn't hold up in real life).  

Also note that most vendors don't perform negative testing, astonishing though that may seem.

Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

    Injustice is relatively easy to bear; what stings is justice.

                        -- H.L. Mencken

More information about the NANOG mailing list