Vyatta as a BRAS

Dobbins, Roland rdobbins at arbor.net
Tue Jul 13 21:18:18 CDT 2010

On Jul 14, 2010, at 3:26 AM, Tony Li wrote:

> The whole point about being DoS resistant is one of horsepower.  To do DoS protection correctly, you need to be able to do packet examination at line rate.

Right.  And to date, such routers make use of ASICs - i.e., 'hardware-based' routers, in the vernacular.  

Routers which use only centralized, general-purpose processors can't handle even a fraction of 'line-rate' without tanking, as innumerable real-world examples of said behavior over the years have repeatedly and conclusively demonstrated.


Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

    Injustice is relatively easy to bear; what stings is justice.

                        -- H.L. Mencken

More information about the NANOG mailing list