Interesting BFD discussion on reddit

Glen Kent glen.kent at gmail.com
Mon Feb 16 03:25:17 UTC 2015


>
>
>
> I wonder if Trio, EZChip and friends could do SHA in NPU, my guess is yes
> they
> could, but perhaps there is even more appropriate hash for this use-case.
> I'm not entirely convinced doing hash for each BFD packet is impractical.
>
> [0] http://www.ietf.org/id/draft-mahesh-bfd-authentication-00.txt


You might want to take a look at:
http://www.ietf.org/proceedings/89/slides/slides-89-mpls-9.pdf

Look at the slides 11 onwards.

Doing HMAC calculation for each packet adversely affects the number of
concurrent sessions that can be supported.

Glen.


>
> --
>   ++ytti
>



More information about the NANOG mailing list