To: hps@intermeta.de
Cc: linux-kernel@vger.kernel.org
Subject: Re: bandwidth for bkbits.net (good news)
References: <20030830230701.GA25845@work.bitmover.com>
	<87llt9bvtc.fsf@deneb.enyo.de> <bj1fhj$its$4@tangens.hometree.net>
From: Florian Weimer <fw@deneb.enyo.de>
Mail-Followup-To: hps@intermeta.de, linux-kernel@vger.kernel.org
Date: Fri, 05 Sep 2003 10:10:31 +0200
In-Reply-To: <bj1fhj$its$4@tangens.hometree.net> (Henning P.
 Schmiedehausen's message of "Tue, 2 Sep 2003 07:06:27 +0000 (UTC)")
Message-ID: <874qzrsljc.fsf@deneb.enyo.de>
User-Agent: Gnus/5.1003 (Gnus v5.10.3) Emacs/21.3 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: linux-kernel-owner@vger.kernel.org
Content-Length: 1161
Lines: 26

"Henning P. Schmiedehausen" <hps@intermeta.de> writes:

> Florian Weimer <fw@deneb.enyo.de> writes:
>
>>do this for a T1 customer (typically, it requires "unusual"
>>configuration of vital production routers with the fat pipes).
>
> You need a shaper connected to the ISP backbone which shapes the
> outgoing traffic for you and a border router which talks to the T1
> (C17xx or C26xx). Normally, if your ISP has some sort of clue, you
> will also need a bastion router which can handle backbone <-> 100 MBit
> traffic and does dynamic routing updates (EGP or OSPF) to the ISP
> backbone (A C26xx or C37xx).

C37xx can handle a maximum load of 225 kpps (data sheet number,
i.e. this value cannot be exceeded even under most favorable
conditions), the others handle even less.  Such routers are of no help
during a DoS attack.

Yes, I snipped the DoS context, and your approach would work in a
benign environment. 8-)
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/