DMVPN via Internet or Private APN

Saku Ytti saku at ytti.fi
Tue Jan 12 17:06:16 UTC 2021


On Tue, 12 Jan 2021 at 18:57, Sean Kelly <kellysp at gmail.com> wrote:

> The real debate arrives when it's time to choose a carrier to host the
> router. I choose to go with a major cell carrier using a "private"

I'm not sure I see the sides of the debate. I personally see no
utility at all in paying premium for APN, I see it as a way to pay a
premium to get liability. There are no improvements in security
posture but obviously if there is APN specific outage, outage in your
APN is not going to be much of a priority compared to outage at
consumer APN, which is fire drill.
As well as you make it a lot harder to procure and negotiate,
particularly if you expand to new markets. Compared to dial-home DMVPN
where you have no requirements above most standard INET access
offered.

I assume you mean DMVPN with IPSEC. If you don't imply IPSEC, then I
assume security wasn't a metric for this product.

-- 
  ++ytti


More information about the NANOG mailing list