Slashdot Mirror


Open Source Router on Par With Cisco, Users Say

Jane Walker writes "On a mission to avoid paying top dollar for Cisco routers, two users say Vyatta's Open Flexible Router is a viable alternative to the proprietary norm. Find out about the pluses and minor hassles involved in deploying this alternative." This probably won't surprise the users of (much lower end) networking gear like the famously hackable Linksys WRT54G, which — like a number of internally similar routers — can be reconfigured with one of several open-source firmwares to do things impossible with the hardware as delivered.

202 comments

  1. Re:Huh? by sdBlue · · Score: 1

    Was working on it. Trying to (gasp) RTFA first...

  2. Difference between hardware and software.... by gweihir · · Score: 3, Insightful

    It is not surprising that low-end software routers can offer most things a proper Cisco router can. However when you need hgher speeds, a software router can not cut it. It is then when hardware routers show their strenght. A 100Mbps line usually does not require a hardware router. A 10Gbps line does.

    --
    Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
    1. Re:Difference between hardware and software.... by Shaman · · Score: 5, Informative

      Bleah. This is tripe. Most Cisco routers have cheap, slow Intel processors in them.

      Until you get up into the gigabit speeds, regular PC hardware is just as good or better. The only thing you have to watch for in the multi-hundred-megabit routing loads is that you don't have a lot of access control lists - which is also an issue you will run into with any router you might choose. Spending some time sizing the buffers and other kernel parameters is also important, because a stock Linux kernel is not set up to be a network core router.

      I've got over 2,000 L2TP connections going into a single 2.4Ghz Intel box running Linux. Performance is significantly better than the Cisco 7204 that it replaced, and it's a lot cheaper and more flexible to support.

      Now, in the multi-gigabit routing tasks, do yourself a favour and get a L7 switch with custom ASICs. Extreme, Foundry and others will be happy to sell you one. Cisco's stuff is crap, right up until you get their million dollar badasses which they bought from another party (go figure).

      --
      ...Steve
    2. Re:Difference between hardware and software.... by Shaman · · Score: 3, Informative

      FYI, I had a 7204 VXR and the Linux solution easily outperforms it.

      Still have it, I never throw anything away...

      cisco 7204VXR (NPE400) processor (revision A) with 114688K/16384K bytes of memory.
      Processor board ID 21280102
      R7000 CPU at 350Mhz, Implementation 39, Rev 3.3, 256KB L2, 4096KB L3 Cache
      4 slot VXR midplane, Version 2.1
      Last reset from power-on
      Bridging software.
      X.25 software, Version 3.0.0.

      PCI bus mb0_mb1 (Slots 0, 1, 3 and 5) has a capacity of 600 bandwidth points.
      Current configuration on bus mb0_mb1 has a total of 600 bandwidth points.
      This configuration is within the PCI bus capacity and is supported.

      --
      ...Steve
    3. Re:Difference between hardware and software.... by Cally · · Score: 1

      You've heard of CEF, right?

      --
      "None are more hopelessly enslaved than those who falsely believe they are free." -- Goethe
    4. Re:Difference between hardware and software.... by gweihir · · Score: 1

      Sorry, I just meant that for lower speeds, buying Cisco is defeinitely a waste of money.

      For high speeds get a hardware router and not necessarily from Cisco. In fact I don't like Cico for several reasons, which I will not go into here.

      --
      Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
    5. Re:Difference between hardware and software.... by Shaman · · Score: 4, Informative

      Certainly have heard of CEF. And have witnessed first-hand how bad it usually works in a big Internet environment.

      Let's see...

      --

      IP CEF with switching (Table Version 271518), flags=0x0
          1030 routes, 0 reresolve, 0 unresolved (0 old, 0 new), peak 3
          1033 leaves, 27 nodes, 152040 bytes, 269271 inserts, 268238 invalidations
          0 load sharing elements, 0 bytes, 0 references
          universal per-destination load sharing algorithm, id 26B36E8A
          2(0) CEF resets, 1425 revisions of existing leaves
          Resolution Timer: Exponential (currently 1s, peak 1s)
          2250 in-place/0 aborted modifications
          refcounts: 9206 leaf, 7168 node

      Adjacency Table has 888 adjacencies
          2 incomplete adjacencies

      --

      It does speed things greatly. Load on the 2.4Ghz Linux box that replaced it is 0.07 right now, with 1800 L2TP connections.

      --
      ...Steve
    6. Re:Difference between hardware and software.... by Anonymous Coward · · Score: 0

      I have heard more of CEF than I like. Seldomly I have seen a "solution" with so many problems...

    7. Re:Difference between hardware and software.... by element-o.p. · · Score: 4, Informative

      Ummm....no. In anything more complicated than what a switch can do, you are using software to process packets.

      Yes, Cisco (and others) have routers that use ASICs to handle immediate in/out "routing" in hardware, but as soon as you start putting any kind of ACL, any kind of port/IP translation, or anything else that requires any intelligence on the router, you bring in software, and all of the processing overhead that goes with it.

      So....if you are going to do anything *useful* with a router would you rather have a 50-200MHz Cisco box running a bloated IOS (do you *really* use X.25, for example???), or a server-class x86 motherboard running a 1GHz processor with a kernel optimized for routing and software optimized for the protocols you actually use?

      We use http://www.imagestream.com/ImageStream Linux-based routers where I work, and they absolutely run circles around the 2600, 3000, and as5000 -series routers that we have. Their support is absolutely phenomenal. When we have a problem with an ImageStream router, we frequently talk with their programmer, and he works with us until we have a patch installed on the box that fixes the problem. If there's a software bug in your Cisco router, it's "yeah, that will be fixed in the next IOS release"...which unless you paid out the <bodily orifice of your choice> for SmartNet you have to *buy*, even though their product was broken when you bought it.

      You can use overpriced Cisco iron if you want; I'll stick with the Linux-based routers, thanks.

      --
      MCSE? No, sir...I don't do Windows. Yes, I am an idealist. What's your point?
    8. Re:Difference between hardware and software.... by El+Torico · · Score: 1
      ...works in a big Internet environment

      That's where you put Junipers.

      --
      In the land of the blind, the one-eyed man is usually crucified.
    9. Re:Difference between hardware and software.... by El+Torico · · Score: 1
      If there's a software bug in your Cisco router, it's "yeah, that will be fixed in the next IOS release"...

      They actually admitted to a bug? Hell, they must love you! When I was with UUNET, we used to have to escalate like mad to get them to admit a problem. Of course, once we had Junipers, Cisco started being much more helpful.

      --
      In the land of the blind, the one-eyed man is usually crucified.
    10. Re:Difference between hardware and software.... by spagetti_code · · Score: 1

      Hate to spoil your rosy view of cisco - but their
      "hardware router" is actually just running software.

      I think what you meant was
      "Cisco's proprietary custom software is better than
      the open source equivalent."

      Cisco's hardware isn't more powerful than a typical
      PC - just more specialised.

    11. Re:Difference between hardware and software.... by jgs · · Score: 1

      their million dollar badasses which they bought from another party

      Huh? CRS-1 was done in-house.

    12. Re:Difference between hardware and software.... by Anonymous Coward · · Score: 0

      "This is tripe. Most Cisco routers have cheap, slow Intel processors in them."

      Now that is tripe. Intel x86 is littleendian; Cisco routers are on bigendian processors (Motorola, RISC) for general processing, assisted by FPGAs for hardware switching.

    13. Re:Difference between hardware and software.... by thanasakis · · Score: 1

      I was under the impression that the VXR equipped with the appropriate line cards would wipe the floor with the PC. Does this linux solution incorporate any kind of ASIC? Any special cards? What kinds of linecards on the VXR?

      Cheers,
      Athanasios

    14. Re:Difference between hardware and software.... by transact · · Score: 1

      Not Intel CPUs. MIPS. The config dump will tell you. For a NPE400 that's a R7000 CPU running at 350MHz. R7000 refers to a MIPS design. I'm not sure who actually manufactures the CPUs.

      As far as I know every Cisco router has a MIPS design processor in it. The chip may be made by TI, Broadcom or NEC, but it is a MIPS design.

    15. Re:Difference between hardware and software.... by Anonymous Coward · · Score: 0

      Do you have some numbers of where a PC hits a limit? There is a huge difference between your 100Mbps and 10Gbps figures.

    16. Re:Difference between hardware and software.... by vaiojunkie · · Score: 1

      Would you share the config? Thanks Wayne

    17. Re:Difference between hardware and software.... by Anonymous Coward · · Score: 0

      "Not Intel CPUs. MIPS. The config dump will tell you. For a NPE400 that's a R7000 CPU running at 350MHz. R7000 refers to a MIPS design. I'm not sure who actually manufactures the CPUs.

      As far as I know every Cisco router has a MIPS design processor in it. The chip may be made by TI, Broadcom or NEC, but it is a MIPS design."

      IBM makes a bunch of chips for Cisco:

      http://newsroom.cisco.com/dlls/partners/news/2004/ pr_prod_06-09.html

    18. Re:Difference between hardware and software.... by saridder · · Score: 2, Interesting

      What part of Cisco's switch is crap? And which switch? Quantify that statement with some solid facts please.

      Cisco routers don't have any Intel processors in them. Some of their network modules that run LINUX do, but their not the router. Open one up and look. In fact they never have and never were x86-based. They were Sun boxes way back when created in Stanford's labs, but that was before Bush Sr. was president. Regular PC's may or may not be able to forward packets as well as a Cisco router, I'm sure you could tweak one to do that, but can they also do QoS, Security (NAC, FW, IPS, etc) application acceleration, WAN BW reduction, act as a branch office IP PBX, offer wireless service, replace branch File and Print servers - all in the same box and running at wire speed?

      Given that the network has moved from a bunch of "tubes" that pass packets efficiently to one that is a L7 aware, intelligent fabric that brokers messages and resources between hosts, secures the data, and incorporates services into the fabric (such as message routing, translation and security) to enable the foundation for an SOA enterprise, who cares about plain vanilla packet forwarding anymore? If I wanted to do that, I'd buy Huawei for a fraction of the cost or get one for free from my Telco. But that's not the state of the networking world anymore, not what customers want and replicating 10 year old technology on open source is just useless for 80% of the market.

      --
      --- RFC 1149 Compliant.
    19. Re:Difference between hardware and software.... by netik · · Score: 2, Informative

      Wrong.

      Foundry ServerIrons handles ACLs in hardware. So do Cisco Catalysts. If you turn on logging, they switch back to software ACLs, but with logging turned off, ACLs ar ein hardware.

    20. Re:Difference between hardware and software.... by Anonymous Coward · · Score: 0

      And cheetahs use your internet?
      What linux do you use? Puppy linux?

    21. Re:Difference between hardware and software.... by Draco_es · · Score: 1

      Damn! At least someone who knows whats talking about. A PC based router is OK and a really money-saving alterntive for some situations(and I would use OpenBSD instead of Linux on them), but definitively there are things it cann't do. I wonder if there is someone doing frame-relay traffic shaping on a PC with a sangoma card, or L2 QoS or LFI or matching by protocol(NBAR) or... And that's only on the low-end

    22. Re:Difference between hardware and software.... by Anonymous Coward · · Score: 0

      Yep, and so was it's predecessor the GSR range. Of course, these products have been heavily influenced by the various other manufacturer's equipment that Cisco have bought in over the years both in terms of design, features and management but name me a vendor that hasn't.

      All in all, GP has a chip on his/her shoulder. Regardless of any objections people may have about Cisco - whether that be technical, ethical or otherwise - only an idiot would rule them out for a job without some solid reason. This goes for any vendor in any market too, sometimes the best tool for the job is made by someone you don't like but dismiss it at your peril because one day you'll have to explain your decision to someone who has no time for moody geeks.

    23. Re:Difference between hardware and software.... by NerveGas · · Score: 1

      It's not frame-relay, but I run a T3 with Sangoma cards, with per-IP traffic shaping at both ends (a hundred and some-odd different IPs). The machines at either end (one Xeon, one Opteron) can't even really be considered "warming up" when the T3 is saturated.

      On a 2621 (which, admittedly, is ancient) with two T1s, the poor thing would drown itself just doing per-IP bandwidth limitation before the T1s were full. Not to mention that you're quite limitted in the total number of IPs for which you can perform individual bandwidth limits on the 2621. Perhaps the more modern models are different in that regard.

      steve

      --
      Oh, you're not stuck, you're just unable to let go of the onion rings.
    24. Re:Difference between hardware and software.... by Draco_es · · Score: 1

      With frame-relay traffic shaping, I meant adaptative frame relay traffic shaping, so adjusting to cir when your carrier starts to drop packets. Anyway, your example is a good example that commodity hardware can do things that couldn't some years ago (no more pricey Sun hardware for web serving, and no more pricey Cisco hardware for "simple" routing).

    25. Re:Difference between hardware and software.... by golgotha007 · · Score: 1

      I'm currently using an intel box (2.4ghz) running linux (2.6.17). It has 5 gigabit interfaces with hundreds of vlans spread among them. I'm doing indivudual IP address shaping (thousands of clients), traffic control (what vlan can talk to what vlan/interface), MAC address checking - forwarding - NAT. The load on this machine sits between 0.01 and 0.07.

      Everything is home rolled. I learned how to do everything from the LARTC (Linux Advanced Routing and Traffic Control) mailing list archives.

      The thing I like about using a linux box as a router is I can do anything, absolutely anything I want. I am not limited in any way, shape or form. Not only that, but I saved myself thousands of dollars in the process. win/win.

      Now, I realize that if I need to go into the 10 gigabit range I'll have a bus problem, but until then I'll stick with what I've got.

    26. Re:Difference between hardware and software.... by syn3rg · · Score: 1

      Spot On. Microsoft anyone?

      --
      The contents of this message have been doubly encrypted by ROT13
    27. Re:Difference between hardware and software.... by harbie · · Score: 1

      you mentioned GbE interfaces, but whats the actual traffic going through that machine? throughput/pps is what actually brings a machine on its knees, not the number of clients or vlans.
      also i assume that the network interfaces have some hardware enhancements that take some load off the software processing.

  3. Link to Vyatta by QuantumRiff · · Score: 5, Informative

    Perhaps a link to the actual product would be in order?
    Vyatta Open Flexible Router

    --

    What are we going to do tonight Brain?
    1. Re:Link to Vyatta by Anonymous Coward · · Score: 0

      Dear Vyatta,

      I formally invite you to the 21st century and the widespread use of PNG instead of lossy, artifact ridden GIFs.

      I'd almost forgotten how bad GIFS look, I thought vyatta web graphics were jpgs at > 75%

      Somewhere, a web designer needs an eye test.

      Regards,

      AC

    2. Re:Link to Vyatta by Xichekolas · · Score: 1

      Dear AC,

      We consider our gifs to be artsy and creative... Web 3.0 if you will.

      We scoff at your invitation to the 21st Century... as we and our fellow OSS people are well into the 23rd Century.

      Captain Kirk says hi.

      Regards,

      Vyatta

      --

      Self-referential Sigs are cool on /. these days...

      54

  4. Avoiding "License Transfer" Fees by evansvillelinux · · Score: 4, Insightful

    Isn't this a way to avoid paying for the licensed software on Cisco equipment when it's sold second hand? (Not trolling or anything, I think it's ridiculous for Cisco to demand payment for software that's already been paid for once.)

    --
    IMHO, IANAL, TINLA, etc...
    1. Re:Avoiding "License Transfer" Fees by Wesley+Felter · · Score: 1

      Yeah, I guess you could say that never buying Cisco equipment in the first place is a way of avoiding their fees. But if you already have (or need) Ciscos, OFR won't help you.

    2. Re:Avoiding "License Transfer" Fees by Amouth · · Score: 1

      you only have to pay if you want updated firm ware.. or extra options..

      the IOS is more than the hardware... you can buy cisco routers dirt cheep if you don't want the IOS..

      another case where the software is what has the cost behind it

      --
      '...if only "Jumping to a Conclusion" was an event in the Olympics.'
  5. if it is only "Standard PC Hardware" by MerlynEmrys67 · · Score: 3, Insightful
    It isn't comparable with Cisco.

    But then again for SMB - you don't need 100 MBit routing - many of your internal clients are slamming into your sub 10 Mbit internet connection anyway (that is probably further BW limited by the cable/phone company). Now for true enterprise - you really do need switching/routing at the ASIC level - real switching fabrics (not a glorified PCI bus) in the hardware etc. to handle the multiple GBit links, multiple OC12/OC48 connections to the world, etc.

    This is where Cisco shines and I don't see "software only solutions" coming anywhere close

    --
    I have mod points and I am not afraid to use them
    1. Re:if it is only "Standard PC Hardware" by Cheeze · · Score: 1

      OC3 and greater are probably not in 98% of the companies right now. Most of these companies probably have a weak DSL line with a linksys device. As companies get larger, they move up to T1 and need new hardware, it's probably a shock to have to pay the Cisco tax. What's the price of a 7200VXR class of router these days? If you could provide the same service with an old PC and a few PCI cards at 1/10th the price, you just made a nice cut-rate market for yourself.

      --
      Why read the article when I can just make up a snap judgement?
    2. Re:if it is only "Standard PC Hardware" by Shaman · · Score: 2, Interesting

      Cisco has the worst-performing L7 switches on the market until you get into the really large-dollar stuff (which they bought from another company). Use Extreme, Foundry or Big Iron and be much happier.

      Cisco's routers are cheap, mostly Intel-based systems with PC-quality hardware and low performance for the dollar. If you are routing mostly Ethernet (which most do these days), you can build a multi-hundred-megabit Linux router very inexpensively and get more performance out of it than a 7x00 series Cisco router.

      --
      ...Steve
    3. Re:if it is only "Standard PC Hardware" by MerlynEmrys67 · · Score: 1
      Strange - why would you expect companies to step down from decent DSL speeds to T1 rates. I assume small companies stay on DSL/Cable for the download rates (host their web server somewhere else - what do you need upload speeds for anyway), then move up to OC12/48 rates (or multiple OC3) when there are enough employees to justify the need for the upload rates these speeds provide - or the reliability of multi homing the network. Again this trade off happens somewhere north of 100 tech workers, or multiple branch offices needing to share resources (SVN/CVS/???) for development

      I defy you to be able to route 4 Gbit interfaces through a single low end PC, heck - even a mid range server with a few PCI-X interfaces... Don't think you can do it.

      Anyone have any Packets Per Second (PPS) rates for a generic PC ? It used to only be in the 10 Mbit/sec range - for 4 interfaces... I am sure it is quite a bit faster today with decent hardware

      --
      I have mod points and I am not afraid to use them
    4. Re:if it is only "Standard PC Hardware" by Gadzinka · · Score: 3, Interesting

      If I had one dollar for every time I give this answer, I'd be frelling rich:

      99% of businesses use sub 10Mb connection to the Internet and yet they are told the Cisco is the only way to connect them professionally. Moreover, the sub-$10k Cisco gear is a crap when it comes to performace, on par with good PCIe PC running on multiple Gbit eth interfaces.

      That about sums it up.

      Robert
      --
      Bastard Operator From 193.219.28.162
    5. Re:if it is only "Standard PC Hardware" by Anonymous Coward · · Score: 0

      It isn't comparable with Cisco
      It also doesn't have any support for anything that compares with Cisco's extended access control lists for allowing extremely fine-grained filtering of what ports & protocols you wish to allow between combinations of individual hosts and snippets of subnets.

    6. Re:if it is only "Standard PC Hardware" by Cally · · Score: 4, Informative
      Gosh, someone who knows what they're talking about ;)

      If your internet link is DSL, you do not need a real router :)

      I should point out that this topic comes up every couple of years on NANOG, ummmmmm... here's a reasonable selection from the last decade. These people have forgotten more about routing than most of us here will ever know. And until generic PCs come with multi-gig backplanes, it ain't happening anywhere except the low end. And at the low end, you're better off either leaving it to your ISP or using a few whitebox "desktop" switches/routers. They're cheap, cheerful, work, and you don't need to know the difference between "sh ip bgp run" and "sh bgp ip run"...

      --
      "None are more hopelessly enslaved than those who falsely believe they are free." -- Goethe
    7. Re:if it is only "Standard PC Hardware" by Tweekster · · Score: 1

      Most businesses simply dont have those demands...Yes, large businesses do, but that isnt of concern for the hundreds of thousands of small to medium sized businesses in the US.

      --
      The phrase "more better" is acceptable English. suck it grammar Nazis
    8. Re:if it is only "Standard PC Hardware" by Anonymous Coward · · Score: 0
      It also doesn't have any support for anything that compares with Cisco's extended access control lists for allowing extremely fine-grained filtering of what ports & protocols you wish to allow between combinations of individual hosts and snippets of subnets.

      No?

    9. Re:if it is only "Standard PC Hardware" by Anonymous Coward · · Score: 0

      Obviously if you need to route between 4 loaded Gb interfaces at close to wire speed, a linux router isn't for you. How many companies actually need that? We only route between 2 100Mbps networks and to our 2Mbps leased line, a linux router would work fine for us. Since 100Mbps between networks at the router isn't a bottleneck for us and most traffic is routed to WAN, I'd prefer to invest in layer3 switching before some over-spec'd router ;-)

    10. Re:if it is only "Standard PC Hardware" by HKcastaway · · Score: 1

      Wouldn't those companies do far far better getting a US$20 9V DC Taiwanese router, which consumes less power has less parts to fail and is simpler to install?

    11. Re:if it is only "Standard PC Hardware" by aesiamun · · Score: 2, Insightful

      Because even commercial Cable and DSL sales have very little to no QOS. Read your agreement with your local cable co at some point...

      You aren't guaranteed uptime as a business cable company anymore than you are guaranteed uptime as a residential customer.

    12. Re:if it is only "Standard PC Hardware" by pe1chl · · Score: 1

      Cisco's extended access lists are extremely limited when compared to Linux iptables.
      The first thing that is apparent is that they are lists. A linear list is not a very convenient way to express your access policy, especially when you have more than one external interface.

    13. Re:if it is only "Standard PC Hardware" by Anonymous Coward · · Score: 0

      I absolutely guarantee the 7600 series will smoke the linux box in any routing task you can imagine. ;)

      I assume by 7x00 series router you mean the _7200_ series. Well, it's old, but you're right. Performance-wise, if you don't want to do anything interesting, the linux solution is superior. However, the 7200 series is designed to be reliable, feature-rich, and modular. You pay a price for those options. As you try to add features, the linux solution will fail to outperform a comparable Cisco device. Not to mention the apparent lack of modularity/hot swap capability.

      The modern, low-end 28xx series is a more reasonable comparison. Again, you're trading feature set for cost -- the 28xx series starts around $2000 USD. The linux router has most of the basic functionality, and is presumably cheaper, depending on the hardware selected. It does _not_ have advanced features of a modern low-end router:

      http://www.cisco.com/en/US/products/ps5854/product s_data_sheet0900aecd8016fa68.html

    14. Re:if it is only "Standard PC Hardware" by pe1chl · · Score: 1

      This always depends on local requirements. It is not difficult to name some features that a Linux box can perform without trouble, and a Cisco cannot.

      For example, when you have multiple single-IP-address links to the Internet, and you want to offer several internal systems access via NAT, you will run intro trouble with IOS.
      Linux routers, and also some low-end routers like Draytek 3300 can do this without problem.

      In general, IOS has trouble with situations where there are different external connections that each should have the default pointing to them, but should not be arbitrarily intermixing traffic (each should send only traffic sourced from the address of that interface). This is because policy routing in IOS is tied to the "incoming interface", which does not work well for things like tunneling and load balancing.

      So, when your task is to provide Internet access and VPN for a small company over multiple redundant DSL connections, it may well be that the Linux box can do things that the Cisco can't. Even though you would think this is a common setup.

    15. Re:if it is only "Standard PC Hardware" by Anonymous Coward · · Score: 0

      No?

      "No" is correct. Vyatta doesn't exactly use regular Linux iptables like a RedHat or SuSE box would, it uses a specialized implementation of XORP. Vyatta's own documentation explains why it falls short as a firewall, as it was designed first to simply just route packets, not route+firewall+filter them all at once.

    16. Re:if it is only "Standard PC Hardware" by Mohan+S · · Score: 1

      I think perceptions of speed threshold that standard PC hardware can deliver need revision. I remember a thread of similar nature about a month ago. Standard Linux can saturate 2x1GB links for 1500 packet sizes with iptbles running. A Sunfire x2100 running an Opteron at 2Ghz with 2 PCI Xpress ethernet ports forwards 900Kpps (64 byte packet) while a CISCO 3845 caps at 600Kpps. Software solutions can beat the CISCO ISR platforms hands down on perofrmance and given the ingenuity of the open source forums, delivers far richer feature set than what CISCO offers.

    17. Re:if it is only "Standard PC Hardware" by Cramer · · Score: 1

      why would you expect companies to step down from decent DSL speeds to T1 rates
      Because they want the reliablity. Or, as is true in my case, your phone lines are crossing it too.

      I defy you to be able to route 4 Gbit interfaces through a single low end PC
      Define "low end"... using a SuperMicro PDSMi-LN4, I can push nearly 700Mb/s out each port, at the same time, from userland (libpcap, which isn't exactly efficient.) [That's 4 PCIe gig interfaces.]

      Anyone have any Packets Per Second (PPS) rates for a generic PC
      Not with linux... There were reports of ?BSD pushing over 1mil.

    18. Re:if it is only "Standard PC Hardware" by Cramer · · Score: 1

      where x=2, yes. Most of the time.

      x=5... why would anyone use a 7500 for ethernet switching?

      x=4; Hell no. The 7400's (7300's, 7600's, ...) use an NSE, not NPE, that has Cisco's newest uber-hardware -- PXF, parallel express forwarding -- that can (and does) do line rate packet inspection. And I've configured one to do so with my own hands. It was designed for broadband aggregation -- termination of L2TP/PPPoE -- for 10k+ users.

      But, yes, Cisco's gear is expensive. Period.

    19. Re:if it is only "Standard PC Hardware" by Cramer · · Score: 1

      Most of the sub-$10k cisco routers are far inferior to even a crappy, "junk" PC. However, the PC ceases to be cheap when you start to plug a T1 into it.

      At work, we get away with not caring because the T1's data is handed to us as ethernet from the device that's sharing voice on it. If it were a straight T1, we'd need a "router" with a T1 interface.

    20. Re:if it is only "Standard PC Hardware" by LWATCDR · · Score: 1

      For some but they do not offer all the features of a Linux based router.
      With a slow internet connection you can use your router box for other tasks like a squid proxy, filtering, DNS, VPN, or even hosting a small web site.
      Again it really depends on what you need and what talent you have in house.

      --
      See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
    21. Re:if it is only "Standard PC Hardware" by MerlynEmrys67 · · Score: 1
      I'd prefer to invest in layer3 switching before some over-spec'd router ;-)
      So answer me this one... What is the difference between a "Layer 3 switch" and a "Router".

      No seriously - I actually have been trying to find out...
      Wish I had replied earlier so I could see about 10 different replys giving 12 different answers

      --
      I have mod points and I am not afraid to use them
  6. I LOVE DD-WRT by celardore · · Score: 3, Interesting

    I rent a housemate cable internet, which we had terrible problems with before. The problem is a bad cable causing a load of bad packets to 'clog' the router. It is the only cable long enough I have though, but the DD-WRT firmware worked a treat. It does allow some cool features, such as increasing the number of IP connections from 512 (the default) to 4,096 which is ideal for p2p. You can also boost wireless power from the 28mW default to 250mW+. Anyway, my problem with it clogging up was solved by setting up a cron job within the router so that it reboots at 5am each day. Not ideal, but the solution works until he gets off his ass and finaly buys a wireless card.

    1. Re:I LOVE DD-WRT by Anonymous Coward · · Score: 0

      the problem is a bad cable causing a load of bad packets to 'clog' the router. It is the only cable long enough I have though

      Cable is cheap. Buy a new cable.

      Or buy a cable spool. A thousand feet of cat5 will cost less than $60.

    2. Re:I LOVE DD-WRT by celardore · · Score: 1

      Cable is cheap, but I don't need to buy it. I have no use for it, I have plenty of ethernet cables that are adequate for my own purposes. I told the guy I sell internets to that he's welcome to buy a wireless card that will actually give him better performance, as proven when I borrowed a wireless MIMO USB card for him to use temporarily.

      Part of the problem with the cable is that it *has* to be jammed in the corner of my fire door to my rented flat (so no property modifications like drilling). Which damages it a little more everytime I close the door. That said though, it has been running for months with few problems, with the exception of the automatic router reboot every day.

      Celardore

    3. Re:I LOVE DD-WRT by Anonymous Coward · · Score: 1, Funny
      I told the guy I sell internets to...


      So YOU'RE Senator Stevens' roommate!
    4. Re:I LOVE DD-WRT by Anonymous Coward · · Score: 0

      If you love DD-WRT you should definately check out OpenWrt (www.openwrt.org) - adds the same features as DD-WRT and more, with more flexibility better performance.....and higher geek-factor ;-) http://www.macsat.com/ also contains some examples on what you can do with OpenWrt.

    5. Re:I LOVE DD-WRT by noidentity · · Score: 1

      Anyway, my problem with it clogging up was solved by setting up a cron job within the router so that it reboots at 5am each day.

      "Clog" you say, as in "it's trying to receive an internet or two over the tubes but not getting there until Friday?" Just get a bigger tube!

    6. Re:I LOVE DD-WRT by Agripa · · Score: 1

      If you are adept at soldering and use the correct pair order, a section of flat ribbon cable could be used where the door is pinching it.

    7. Re:I LOVE DD-WRT by cciRRus · · Score: 1

      The best part about DD-WRT is the QoS function, especially so in a typical multiuser home environment. With QoS enabled, I can play online games or VoIP while allowing someone else to run BitTorrent on the other machines in my network. You just don't find this kind of feature on the typical routers unless you pay a premium for it, like the pricy D-Link DGL-4300.

      --
      w00t
  7. ASICs by Rekolitus · · Score: 3, Insightful

    This seems to be an entirely software router that just runs on a standard x86 machine.

    Isn't half the point of buying a dedicated-hardware router that you get ASICs and whatnot that do the job faster than software?

  8. English, please! by Goaway · · Score: 1

    Can we have that article again, this time in English, please?

  9. Re:do NOT modify the hardware - or it may cost you by Rekolitus · · Score: 2, Interesting

    Huh? What?

    It's my hardware. If I buy a Cisco router via eBay, you're telling me I'm not allowed to put Linux on it if I can figure out how?

  10. Re:do NOT modify the hardware - or it may cost you by celardore · · Score: 1

    The Linksys WRT54G firmware is released under the GNU GPL... That's like an invitation to modify it.

  11. TWO consultants agree? by cosinezero · · Score: 1

    Two unknown consultants decide that Cisco sucks?

    If we were to judge solutions based solely on the word of two-or-more IT consultants, we would have "enterprise solutions" with MS-ACCESS backends, with a "robust" monthly backup to .TXT files on floppy.

    Seriously, the holes in this article are big enough to park a datacenter full of Cisco hardware in.

    1. Re:TWO consultants agree? by Syberghost · · Score: 1

      Whereas most places use Cisco because ONE consultant told them to.

  12. Re:do NOT modify the hardware - or it may cost you by v3xt0r · · Score: 1

    Excuse me sir, can you please put down that glass (FUD) pipe.

    Thanks!

    --
    the only permanence in existence, is the impermanence of existence.
  13. Speaking as a fulltime Free Software zealot by Anonymous Coward · · Score: 0

    I'm afraid I have to say that no real network engineer would use Linux (or even BSD, which is a better routing platform - that's why Quagga and Zebra were born and remain most comfortable on BSD) anywhere near the core or backbone. Sure, a drop-and-forget appliance will do for a branch office or a retail outlet - but you could use an $80 Netgear desktop switch in the same application and save yourself a lot of time and grief. Meanwhile, real network engineers - those running BGP and counting throughput in Mpps/interface - will continue to use real routers from Cisco (and Juniper for the more daring of us.) The problem's not the software, it's the hardware. When you can plug multiple 48 10GE linecards into a toy platform, post a story on Slashdot. Until then, stick to IOS for routing.

    1. Re:Speaking as a fulltime Free Software zealot by Anonymous Coward · · Score: 0

      This haughty attitude is quite common amongst self-proclaimed "network engineers".
      The reality of course is that not many companies use 10GE, let alone would need anywhere near multiple 48-line 10GE interfaces on their routers.

      Any reasonable network designer uses switches for the highspeed stuff, and recognizes that there is little point in having 10GE on the inside of their router when the outside is only tens or hundreds of megabit/s.

      And at that rate, a Linux box can route and encrypt packets without assistance from exotic hardware.

    2. Re:Speaking as a fulltime Free Software zealot by sirket · · Score: 1

      Wow- switches for high speed stuff? Jesus what networks do you work with? Where is my OSPF, EIGRP, and BGP on Linux? Where is my VRRP, HSRP and GLBP? Where are the DS3 and OC3 interfaces? Linux works fine for smaller isntallations. If all you are trying to do is connect your office to the Internet then we're not even on the same page. If you work at an ISP, large corporation, or otherwise handle core routing requirements you would never even consider using Linux.

      -sirket

    3. Re:Speaking as a fulltime Free Software zealot by sirket · · Score: 2, Insightful

      Let me be clear- Linux _can_ offer almost all of the same services as Cisco- but not in a single unified way. You need to use Zebra for BGP and add in other software for the other protocols. And what happens if you disappear tomorrow. If your environment is Cisco then you can call any other Cisco admin and they can admin it immediately. Try that with a cobbled together Linux solution.

      -sirket

    4. Re:Speaking as a fulltime Free Software zealot by Koutarou · · Score: 0

      Playing devil's advocate: this has everything you just asked for that is not a Cisco proprietary protocol.

    5. Re:Speaking as a fulltime Free Software zealot by Anonymous Coward · · Score: 0
    6. Re:Speaking as a fulltime Free Software zealot by Anonymous Coward · · Score: 0

      VRRP, just what I was looking for...

  14. Stupid lawyers by nuggz · · Score: 1

    So you're claiming to be a lawyer, but I have a few questions.
    Why post as an anonymous coward?
    Are you violating your client confidentiality with the parent post?
    If I wipe their firmware (which I have a license to use) how am I violating their copyright?

  15. * As long as we're not switching half the U.S. by mpapet · · Score: 2, Insightful

    Summary: Works great, supposed problem sounds like it was a driver issue more than an application issue.

    Reads like a well-placed article-vertisement.

    The "as long as we're not switching half the US" comment are the one's I grow tired of. It's a well-wrapped insult.

    I'm not saying Linux is the best tool for routing half the nation, but the comment points out some things that do prevent more linux adoption.

    1. "free" is not as good as something I paid for
    2. Don't fsck with the status quo.

    I admin a company 100% cisco routers/firewalls and I know for a fact Linux can do what gets done.

    I'm not going to tell the boss to "just" switch or evangelize too much because of the social/economic implications of doing so may impact my future. I like my employer, they like me, so when we need another router, it's a cisco. I am personally disappointed by this, but I think it explains why innovation takes -so- long to come to the data center. (at least in the U.S.)

    Let's not forget that cisco can fire most of their software devs and use a linux-based router project if it ever got close to competing with some Cisco products. Does that qualify as innovation? I'd say no. It's not cheaper or better.

    --
    http://www.maxineudall.com/2010/02/should-economists-be-sued-for-malpractice.html
    1. Re:* As long as we're not switching half the U.S. by Anonymous Coward · · Score: 0

      I think routers are one of those things where "No one ever got fired for buying Cisco." and I think its one of the few areas where it makes sense.

      Networks these days are vital to most companies. Few companies can get anything done if they don't have their networks up and running. So if you have a linux box that goes down or crashes causing tens or hundreds of thousands of dollars worth of lost revenue or productivity, no one is going to commend you for saving a $50k by going w/ a linux+PC solution as opposed to a CISCO solution, and you will probably get fired.

      It is a sad fact of life that IT is a cost center, and often IT departments highest level of performance is "didn't f$%k anything up." Most IT workers don't get their name heard by upper management until they F something up.

      If I was a network guy, I would whole heartedly recommend a Cisco box without any qualms whatsoever. The downside risk is huge, and the upside is small.

    2. Re:* As long as we're not switching half the U.S. by TheRaven64 · · Score: 1
      My university spent £20k on a hardware firewall a year or so ago. For about a month, there was about half an hour of Internet downtime every day while I was in the lab.

      Now consider what else they could have bought for £20k. They were routing GigE connections on the local side, so they could have had several pairs of commodity boxes, each running OpenBSD and pfsync, each pair supporting transparent fail-over if one goes down. Multiplexing can be handled by a relatively simple (i.e. cheap) switch. Say, £1,000 for the switch (let's make it two at £2,000), and ten pairs of machines at £500 each (which buys you a decent amount of hardware at today's prices). That leaves £8,000 in the budget for training (so you don't have to call in an expensive consultant when things go wrong). With this solution, you have redundant backups of every single component. With the hardware solution, there was no redundancy and it really, really showed.

      --
      I am TheRaven on Soylent News
    3. Re:* As long as we're not switching half the U.S. by Anonymous Coward · · Score: 0

      Great- you install that Linux solution and when you quit, retire, or die let's see if anyone else can admin it. So I pay a little more for the Cisco box. I know if I disappear tomorrow any Cisco person could come in and begin admining it right away without any troubleshooting or guessing. Part of the "problem" with Linux is that there are a hundred ways to do everything and everyone has their own little preferences. I'm in no way suggesting that Linux is subpar- just that you need to understand that the few thousand extra you pay for a Cisco is not necessarily wasted.

      Also everyone here seems intent on talking about raw routing speed. Hey if all you need to do is static routing then you probably don't need a Cisco. But what about when running OSPF, EIGRP, BGP etc.? Sure you can get the same functionality from a Linux box using third party software but you run into the same problem I mentioned earlier- will anyone but you know how it is all stuck together? What about HSRP? What about GLBP? The Cisco advantage is continuity. In a larger company if you disappear they know that someone else can come in and admin everything. That isn't the case if you glue random software together on top of Linux.

      Linux isn't bad- but neither is Cisco.

      -sirket

    4. Re:* As long as we're not switching half the U.S. by sirket · · Score: 1

      Your university got ripped off. I could have put in a completely redundant CheckPoint/Cisco/Whoever firewall routing the same GigE connections for less than 20k pounds. Hell I could have put it in for less than 20k dollars. Perhaps there was some sort of crazy requirement you are unaware of that made a simpler solution unacceptable? The last company I consulted for just installed a clustered ChecKpoint firewall with management station routing GigE connections for about $18k.

      I don't disagree that OpenBSD, pfsync and pf make a good choice- I use them in a lot of smaller installs. I also use pfsense and monowall a LOT. That said, I suspect there were other reasons the firewall your university installed cost 20k pounds. As for the outages- I have no explanation there unless your university has a very complicated network. I haven't experienced the sorts of deployment problems you are describing and I've been involved in a number of very large firewall deployments.

      -sirket

    5. Re:* As long as we're not switching half the U.S. by TheRaven64 · · Score: 1
      As for the outages- I have no explanation there unless your university has a very complicated network.

      Actually, the problem is that they have a very simple network. It's a completely flat topology across campus, and no one has a plan of exactly where the network cables all run, so it is almost impossible to do anything about it.

      --
      I am TheRaven on Soylent News
    6. Re:* As long as we're not switching half the U.S. by Anonymous Coward · · Score: 0

      If they're that stupid it doesn't really matter what equipment they install.

  16. Advertorial by HKcastaway · · Score: 2, Insightful

    It is great that someone is out there tyring to put some preassure on Cisco however this company is not it. I think the average Linux installation with NAT is a bigger threat that this project.

    PC hardware is a joke, slow backplanes, limitation on how many interfaces you can plug in. On the techspecs the number of interfaces types they use is well very very limited. Then reliability of PCs a joke compared to a Cisco box.

    Where is this product used?
    - Is this a bloated replacement for the US$20 taiwan PPPoE router you can buy? The taiwanese will beat it on TCO hands down on power consumption.
    - Is this for the edge of the network to service downstream customers? Why part away from the thousands of installations which live, have predictable and very proven track record of something like a Cisco 7200VXR..

    The article (Advertorial) is nicely skewed as making Cisco seem expensive. Go on ebay and look for Cisco routers with FE ports, you can find them for a few hundred dollars. Or try to compare this with 3550 which will provide 24 ports with Layer 3 functionality for way below the US$2000.

    I am tired of Cisco killing products off when they feel like it.
    They could go into the market of breathing new life into a product that is being cancelled by other vendors. Firebox II anyone?

    Vyatta still need a strategy. period.

    1. Re:Advertorial by Anonymous Coward · · Score: 0

      Go on ebay and look for Cisco routers with FE ports, you can find them for a few hundred dollars.

      You might be able to find some Cisco routers that have FE ports for cheap, but they can't route packets anywhere near the 100Mbps speed. I got a 3620 with a NM-2FE2W module for my 20Mbps fiber connection, and the thing can barely do 15Mbps. I ended up using m0n0wall on a spare machine that can route MUCH faster than 20Mbps I currently need. I love Cisco equipment, it has great features, and very reliable, but for the performance you get with the low end stuff, the price is a joke. The 1800/2800 routers have better performance, but with all the software features they can get really expensive. Check out this document for some realistic routing performance.

    2. Re:Advertorial by HKcastaway · · Score: 1

      Cisco does pump out "PIG" versions of their IOS specially if you load the latest and greatest. You will get poor performance out of them. Always go for older versions, stability, higher performance etc...

      I've never maxed out 3640, so I don't have personal stats but know of one of the portals in HK a few years ago was running more than 20Mbit through a 3640.

    3. Re:Advertorial by Anonymous Coward · · Score: 0

      I've tried numerous IOS images from 12.1, 12.2, 12.3.. all have roughly the same performance on my 3620. I know those 100Mbps ports are probably mostly designed for inter-VLAN routing, but still was a major disappointment when I found out how much it can route between interfaces. The Cisco datasheet shows 10-20Mbps performance for my router, so I don't think it matters what IOS version I am running, it will never go above 20Mbps. It also says that a 3640 can do about 25-35Mbps throughput, so that sounds about right.

  17. No huge suprise by peterdaly · · Score: 2, Insightful

    In or around 1999 I had a 1000 device network routing through a 133Mhz PC running Linux. The 133Mhz system practically thought is was sittle idle as it shuffled packets between three 100 megabit networks.

    I'm not suprised at all that these Open Source solutions are on par with Cisco for many users. My only real concern would be support. At least back then (I have not dealt with them recently), Cisco had great support and would "own" network problem resolution in a way that made it worth paying their price.

    1. Re:No huge suprise by macdaddy · · Score: 3, Insightful
      There is nothing like calling Cisco TAC at 04:00. You get an Aussie TAC engineer that knows 1) you're network is seriously fscked up or you wouldn't be calling him at 04:00, 2) you've already removed what little hair you have from your head and your scalp is bleeding. The nightshift engineer is highly experienced in working under said conditions and is more than capable or resolving the problem. I've been in that position twice in the last month. All I can say is I want to move to Austrailia, mate.

      I wish the SmartNet prices were a little more reasonable. They should cut the prices dramatically for the lower-end 8x5x4-day replacement support so that more people can afford it. This would be a solid recurring business for Cisco whereas only a small percentage of Cisco customers bother buying support nowadays.

    2. Re:No huge suprise by nuintari · · Score: 1

      So, you have a couple of subnets, all through one central router that has one default route, so your routing table has what? All of four entries? And you think this proves that a PC can beat a 'real' router?

      Sorry, that just doesn't need much power to work. Try adding in OSPF, and some redundant links into your internal network. Get a second ISP and become multihomed, run BGP and add all 194,000+ entires from the global routing table into the mix, watch that P133 slow to a crawl.

      Software routers handle everything on the CPU, the reason 'real' routers work in enterprise scale enviroments is because they do not. The CPU handles BGP and IGP topology changes, individual flows are routed directly on the line cards. Show me a PC based router that can do that.

      --

      --Nuintari

      slashdot : where an opinion can be wrong.

    3. Re:No huge suprise by Shaman · · Score: 1

      You only get that kind of performance out of a Cisco when you spend big bucks. Really, really big bucks. You figure a quad-processor Compaq with same-day service is going to be more expensive than a big Cisco router with tepid performance these days?

      --
      ...Steve
    4. Re:No huge suprise by Anonymous Coward · · Score: 0

      High end Cisco routers aren't about CPU horsepower, they're about specialized I/O hardware that keeps routing from having to *bother* the processor.

    5. Re:No huge suprise by nuintari · · Score: 2, Informative

      AS the AC already mentioned to you, and as I already mentioned, cisco routers route 98%+ of their traffic directly between the line cards, so the CPU can handle important stuff, like handling the routing and express forwarding tables. You can get much better performance out of a cisco because of this architecture because even your quad proc pc based router still has to shove everything through the CPU, and will buckle under the load once you add more than a few line cards. Try plugging your quad proc server full of fiber links and and running some real traffic through it. It won't keep up. It has nothing to do with power, and everything to do with how much shit can it do at once. Cisco equipment uses a backplane that is essentially a very advanced switch(the 73xx series _is_ a switch that has layer 3 routing capabilities), and uses the cpu to direct the layer 3 traffic in a very general way, so that the layer 2 hardware can handle it very rapidly. MRTG poll the cpu clock on a cisco router, unless a major routing change takes place, it is fairly innert. Sign in and do a show version, and it will only be a 200 mhz mips chip, or something else relatively weak, but its not doing anything, because it doesn't have to. The more traffic it handles, it doesn't matter. Try that with a pc router, everytime you add another gigE link, you'll be adding more cpu power to the system to keep up, and it will still under perform. And don't even think about throwing BGP at it.

      To see what a a cisco router does when it routes _everything_ through the CPU, sign into one and do this:

      configure terminal
      no ip cef

      and watch it slow down to a crawl. Now just remember that a cpu can essentially do one thing at a time, that's one packet at a time. But you have god knows how many line cards coming in, all going crazy all the time. You need faster than 1 at a time, because they are coming in 20 at a time, and expecting to leave at pretty much the same rate. Now, I am sure you think multiple procs with multiple cores solves this, but your internal bus won't. You're going to have individual line cards dropping packets like mad because they can't get their incoming data to the cpu fast enough. PC's are not designed to handle shitloads of tiny, serialized data coming in from multiple sources all at once.

      --

      --Nuintari

      slashdot : where an opinion can be wrong.

  18. in other news by atarione · · Score: 4, Insightful

    a small truck can replace a semi truck.... if you are moving small amounts of items.

    --
    actually I am happy to see you, however that is in fact a banana in my pocket.
  19. Linux on WRTs and such. by Anonymous Coward · · Score: 0

    The Linux on WRTs and such is not at the same league as Cisco or other specialised OSes on their own hardware.
    Home user may see that it seems to do the same thing, but this is still far from the reality.

  20. Support, Support, Support by bstory · · Score: 5, Interesting

    Ok, I haven't looked at the performance numbers, but as a network administrator of a medium sized corporate network I could care less. Whether it be Cisco, Juniper, Nortel or 3Com the difference is in the support. When my wan interface or network interface dies at 2am I don't think anyone from the OSS community is going to have a parts depot within 4 hours to fix the problem. I also don't see 24x7 tech support phone numbers manned by volunteers anytime soon. Vendors don't make the money on the hardware, they make it on services and support. I love OSS, but Linux and OSS are not the magic pill for everything.

    1. Re:Support, Support, Support by HKcastaway · · Score: 2, Informative


      You also forgot to mention the fact that the likelyhood of a hardware failure on a PC to a Cisco unit is like 20:1 (for most products).

      Cisco has a far fatter margins on the hardware than PC vendors and can provide a much higher quality product, can afford to underclock the machines for higher reliability etc.

    2. Re:Support, Support, Support by LWATCDR · · Score: 2, Insightful

      I tend to agree with you but...
      With the cost of commodity PCs these days you could probably have an entire second router on hot standby for the cost of a single year's support contract.
      If it is a T-1 then just move the cable over. If it is an Ethernet connection the fall over could be entirely automatic http://linux-ha.org/
      You will also have a trade off of in house time to test and configure vs just buying Cisco.
      Of course their are times where generic hardware will not cut it. However this does offer some interesting options to a off the self router.
      Dedicated hardware will always be faster but software offers a great deal of flexibility.
      With cheap duel core 64 bit hardware just how fast can a software router be today?

      --
      See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
    3. Re:Support, Support, Support by SaDan · · Score: 1

      I would think that with the money you save using the Linux based solution, you could afford to buy a spare card or two. Who in their right mind wouldn't?

      We use Cisco stuff, and we have spare routers, switches and firewalls because even Cisco's reponse time is too slow for our needs. We also have Linux based networking hardware, with spare hardware.

    4. Re:Support, Support, Support by macdaddy · · Score: 2, Insightful

      Well said. This easily says 80% of what needs to be said. Without support you have an OSS space heater at 02:00, assuming it will power up at all.

    5. Re:Support, Support, Support by bstory · · Score: 1

      Well considering that I'm not in all 10 of my locations it's nice to be able to call Cisco and have their technician come out since we don't have IT presence everywhere.

    6. Re:Support, Support, Support by HKcastaway · · Score: 1

      who cares how fast the 64bit dual core is?

      Does a PC have the backplane to move 32/80/120Gbit/s?

      Can it distribute the routing tables to the different interfaces so that switching is done at the card level not at CPU level? Oh wait you have a 64bit cpu so you don't care, but doesn't that mean that the data will be once more on the PCI bus of the machine, which is not designed for switching?

      It is not just cpu that matters, you need the right architecture, which the PC does not really have.

    7. Re:Support, Support, Support by Anonymous Coward · · Score: 0

      "When my wan interface or network interface dies at 2am..."

      You go grab your contingency hardware and install it. What, you don't stock extra hardware in the event of an emergency? It must not be important then if you don't.

    8. Re:Support, Support, Support by teh_chrizzle · · Score: 1

      let me start by saying you're right. according to every firmly established idea in network engineering, you are right. routers built from PC parts and linux or openBSD are based on new ideas that challenge the establishment. they are based on an idea that has yet to be proven right, or proven wrong.

      When my wan interface or network interface dies at 2am I don't think anyone from the OSS community is going to have a parts depot within 4 hours to fix the problem.
      the argument for routers made from commodity parts is that if your WAN interface is just a NIC, you could have a box of replacement cards sitting in box next to the router just in case. in that case, your fix happens 4 hours faster than the mightiest of depot logistics. in that scenario, an identical router built and configured and waiting in the wings is the only thing faster. it's easy to have hot spares when your boxes are $500 each, and not $2000. that's the argument, anyway. i've never seen a PC based router used outside of someone's house, but that's not to say they aren't out there in production somewhere.

      I also don't see 24x7 tech support phone numbers manned by volunteers anytime soon. Vendors don't make the money on the hardware, they make it on services and support.
      if what you are really paying for is support, why not buy/build cheap commodity stuff and pay for top notch support? while i don't personally know any open-source-router-gods-for-hire, there have to be some out there or there wouldn't be so many open source router projects.

      if anything, using an open platform means you can choose a support plan from a vendor that is right for you, rather than settling for what you get when you buy a brand name. if you get mad at cisco for shipping yet another router with no IOS, where are you going to turn to? will foundry help you configure your empty cisco box? those magic serial config cables that cisco guys use can be tough to come by in an emergency, but a floppy disk, keyboard and a monitor are easy.

      of course the community isn't going to answer the phone in the dead of night for free, but if your problem is common, the answer is probably sitting in an FAQ or a forum somewhere right now and you'll be able to find it faster than logging a ticket with a disembodied callcenter in another hemisphere. if it's not common, and does require heavy wizardry, paying the right person not only helps you, but can help the community as well.

      in the end, which is a better value, a VAR that adds value to an expensive product, or a VAR that adds equal value to an inexpensive product?

      --
      sarcasm:
      -noun
      1. harsh or bitter derision or irony.
    9. Re:Support, Support, Support by LWATCDR · · Score: 1

      As I said, there are times when you just move up to custom hardware.
      32/80/120Gbits? Yes you would have to have a dedicated router that costs big dollars but then it would probably be cheap compared to the cost of the connection.

      However not that many companies can afford or need a 32GBit Internet connection and yes your right I can not think of any PC off the top of my head that could handle it.

      However for 100 MBit connections or maybe even for 1GBit connections a PC based router could be just the ticket. There is a lot of space under your 32GBit connection that a PC based router could handle just fine and dandy.

      Just like I do not think that FOSS can provide a solution for every market I don't think that FOSS combined with COTS PC can route a 32GBit connection yet. In a few years from now maybe, but then you would be correct in pointing out that a PC just can not handle that 4 TBit connection your custom router can.

      --
      See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
    10. Re:Support, Support, Support by TheRaven64 · · Score: 1

      So use pfsync and CARP on your OpenBSD-based routers running on commodity hardware and have more redundant ones. Have your router automatically email you when fail-over happens (and you're down to only two or three spares) and you can throw the broken one in the bin and replace it with a new one at your leisure, and still be cheaper than Cisco.

      --
      I am TheRaven on Soylent News
    11. Re:Support, Support, Support by Score+Whore · · Score: 1
      However for 100 MBit connections or maybe even for 1GBit connections a PC based router could be just the ticket. There is a lot of space under your 32GBit connection that a PC based router could handle just fine and dandy.


      Sort of. You average COTS PC has 1 PCI bus. Which clocks in at a mighty 1.05 Gbit/s. That single bus has to carry traffic from your NIC to memory, your CPU has to eyeball it, then send it back out over that same bus to another NIC. You have to transfer twice as much data over the PCI bus as you are routing for every stream. Best case you'll be guaranteed that you'll only get 500 MB out of those GB cards of yours.

      But that's not even a real concern. One thing this thread has shown is that the vast majority of /. readers just don't know squat about routing. The real measure of a router's capability is measured in packets-per-second. What do you think is going to happen to your PC when it gets hit with a stream of small packets at wirespeed? I'm talking 1+ MPPS. You've got 2000 CPU cycles to get the data from the card, into ram, eyeball it, make a decision on where to send it, and get it onto that card before your next packet is ready to come off the incoming port. (And don't forget to take away from your 2000 CPU cycles the cost of the guaranteed data cache miss on every new packet.)

      Anybody who is claiming to route gigabit (or even multiple 100 Mb) networks on a PC is full of it.
    12. Re:Support, Support, Support by Anonymous Coward · · Score: 0

      It sure looks like Vyatta offers support products for the OSS router:
      http://www.vyatta.com/products/

      That seems to separate them from other OSS projects that don't have commercial support options. And, the source article seems to state the support (so far) is pretty good:
      http://searchopensource.techtarget.com/originalCon tent/0,289142,sid39_gci1218088,00.html

    13. Re:Support, Support, Support by LWATCDR · · Score: 1

      Well I would use a COTS PC with a PCX-X bus if I was going to route a one GBit connection with a COTS PC or yes a dedicated hardware router. I will admit that even with PCI-X it may be impossible to saturate a 1GBit connection. Now if I could get some of my users here to understand that GigaE to the desktop is a waste for what we do.
      Your right a lot of Slashdot users are thinking of a small network like they have at home. I am thinking of the small network at my office which I freely admit. Our network uses two DSL connections from different vendors. We also host our own mail server, DNS, and a small web server that we use to provide some specific services to our customers.
      For us a Linux PC based router provides and ideal combination of flexibility and low cost.

      As I said there is a lot of room under for Linux powered COTS routers and they are not a universal replacement for dedicated hardware.
      And yes I agree that the people that think that a Linux/COTS router can match the performance of a high end router from Cisco are as dumb as the people that think that a Server they built themselves with parts from New Egg can compete with an IBM I, P, or Z series server.

      --
      See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
    14. Re:Support, Support, Support by Beryllium+Sphere(tm) · · Score: 1

      Sometimes Cisco support breaks down, and their record on security provoked Bruce Schneier to say "Now it doesn't matter what they say -- we won't believe them. We know that the public-relations department handles their security vulnerabilities, and not the engineering department." With an open-source router, you could in theory have competitive support companies, with all the benefits that competition provides.

      Until guaranteed-response support proves itself for open-source routers, most network admins with mission-critical equipment will want Cisco. But this is a classic disruptive technology: cheaper, not as good, opening new markets rather than serving existing ones.

    15. Re:Support, Support, Support by Anonymous Coward · · Score: 0
      ...as a network administrator of a medium sized corporate network I could care less.

      How much less could you care?
    16. Re:Support, Support, Support by snero3 · · Score: 1
      When my wan interface or network interface dies at 2am I don't think anyone from the OSS community is going to have a parts depot within 4 hours to fix the problem. I also don't see 24x7 tech support phone numbers manned by volunteers anytime soon.

      You do have a point there. But as this runs on x86 hardware whats to stop you from having a stack of spare gig network cards lying around? Hell you could have a whole redundant box for the cost of the cisco gear. We have cisco here but honestly it is _MUCH_ faster to fix things yourself than wait for those guys to get back to you (4 hours is a long time in the ISP/teleco business).

      --
      It said "windows 98 or better" so I installed Linux
    17. Re:Support, Support, Support by Anonymous Coward · · Score: 0

      1Gbps to desktop is certainly not a waste. Most current era gigabit ethernet on the motherboard is connected through a seperate pci-e 1x anyway. I have seen fetches to a different file server machine (running hardware raid-5) up to 60-70 MBps (which is 500Mbps).

    18. Re:Support, Support, Support by LWATCDR · · Score: 1

      It is a waste because the file server in my office is only used for exchanging files. The other network traffic are small database transactions, and an Internet connection.
      For our network it is a waste. 100BaseT switches with a GigaE backbone is the best solution for our office.

      --
      See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
    19. Re:Support, Support, Support by Alioth · · Score: 1

      It depends, really, on your network.

      For us, being able to use inexpensive commodity parts and being able to have a hot-swap that can be connected in less than 5 minutes strongly trumps a hugely expensive router and 4 hour fix commitment.

      This might not work for everyone. But for the typical office with maybe 100 people working in it, with a couple of internet connections, an OpenBSD system with pfsync+carp (i.e. a spare box and automatic fail-over) will trump a single Cisco router most times and save significant amounts of money. The Cisco user will be without a network for up to 4 hours, whereas the guy with a redundant setup plus a hot spare that can be simply plugged in will probably not even go down.

      This setup doesn't work for everybody - it's not a silver bullet. But then again, for many small to medium sized businesses, Cisco is far from being a silver bullet.

    20. Re:Support, Support, Support by Alioth · · Score: 1

      The vast majority of businesses and people in the United States and Europe work for small to medium sized businesses. Most of these businesses will have no more than a couple of 100Mbit/sec LAN segments and at best a couple of low speed (T1 or ADSL style) internet connections. Inexpensive commodity hardware is entirely appropriate for these kinds of setups - and redundancy can be inexpensively built in (two commodity hardware systems running OpenBSD with pfsync+carp) - all for a fraction of the price of a non-redundant Cisco setup which is vastly over-specified for the business in question.

    21. Re:Support, Support, Support by derF024 · · Score: 1

      When my wan interface or network interface dies at 2am I don't think anyone from the OSS community is going to have a parts depot within 4 hours to fix the problem. I also don't see 24x7 tech support phone numbers manned by volunteers anytime soon. Vendors don't make the money on the hardware, they make it on services and support. I love OSS, but Linux and OSS are not the magic pill for everything.

      I've never encountered a problem with a business critical system that could wait 4 hours that couldn't wait 24. If the wan port on critical networking gear is down for 4 hours, someone's head is going to roll. It doesn't matter if you bought cisco gear and cisco had someone out 4 hours after the problem was reported; if the equipment was important, you should have had two of them on site with one in hot or warm standby mode ready to go. Once your dead gear is swapped out, you can go get it replaced however you damn well please. At that point, having the 4 hour response time isn't all that important.

      Computers are cheap. People are expensive. Lost business is expensive. If your critical router dies at noon on a Tuesday and no one in your organization can get work done all afternoon, you've blown through the cost of a second router several times over.

    22. Re:Support, Support, Support by SaDan · · Score: 1

      Again, response time from Cisco is not as good as me getting on a plane, fixing something, and flying back. I have to do this for products that the company I work for maintains anyways, so maybe my frame of mind is different when it comes to stuff like this.

      I've not had any issues whatsoever with the PC hardware used for routing/firewall/etc in the 15 years I've been running these types of boxes. Build for the task, and they tend to last quite a while. Cisco stuff isn't bad, but I've had way more fans fail in Cisco equipment than I have had with the PC equipment.

  21. Huh, Samba file sharing? by IpSo_ · · Score: 3, Insightful

    "The feature set was comparable to your standard Cisco router," Knox said. "They were offering translating, gateway capability, Samba file sharing, VLAN trunking to 11q ... it really looked like a corporate-level router," he said.

    Since when do "corporate-level routers" offer samba file sharing? This seems like the LAST thing I would ever want to put on a router. The only thing I could possibly see Samba being useful for is downloading log/config files. But on a router that is kinda scary, SCP seems much more secure and just as useful.

    Open source routing is definitely an option now though. Over 3 years ago the web hosting company I worked for swithced out their Cisco routers that couldn't handle the slighest DDoS attack for a couple AMD based Linux boxes that could easily handle wirespeed DDoS attacks with ease. Not to mention they were a fraction of the cost.

    --
    Open Source Time and Attendance, Job Costing a
    1. Re:Huh, Samba file sharing? by Anonymous Coward · · Score: 0

      Why waste the 70GB or so of left-over disk space. Since this machine is on both networks, I would do something like use it as net host for installing applications from.

    2. Re:Huh, Samba file sharing? by HKcastaway · · Score: 1

      They can also use Cisco PIX's which run on AMD cpus and handle DDoS and also can automatically fail over when used in pairs.

  22. This is a good thing? by fiendy · · Score: 1

    It was my understanding that Cisco was the best network hardware manufacturer out there, but after having 3 linksys routers die on me in the last 5 years (one a week out of warranty coverage). I won't be going anywhere near linksys again.

    My buddy just lost one as well.

    1. Re:This is a good thing? by HKcastaway · · Score: 1

      I suggest you buy Cisco next time, not Linksys.

      When comparing the products of the two companies in say Wifi routers, Cisco Aironet (even though it can't be reflashed for Linux), is a far superior product to the Linksys equivalent in terms of quality, configuration etc.

    2. Re:This is a good thing? by theelectron · · Score: 1

      Hate to break it to ya, but Cisco only bought Linksys 3 years ago, so you probably can't put all of the blame on Cisco if you had some of those routers for 5 years or so. Also, if you kill them that fast, are you sure it's not an environmental factor like overheating?

    3. Re:This is a good thing? by fiendy · · Score: 1

      Nah, standard residential use of the 4/8 port routers. Heat wouldn't have been outside of normal operating temps.

      I was aware that Cisco only recently bough linksys, but at any rate, I still won't be buying them again, since I've had nothing but trouble with them.

    4. Re:This is a good thing? by HKcastaway · · Score: 1

      Try Cisco, not Linksys.

    5. Re:This is a good thing? by theelectron · · Score: 1

      Have you tried the drop-kick repair method? Sometimes it works for me, sometimes it doesn't... Ok, it usually doesn't, but it's still kinda fun!

  23. So... a Cisco router as good as a Cisco router? by Kenja · · Score: 1

    Hate to break it to ya, but Linksys is owned by Cisco.

    --

    "Have you ever thought about just turning off the TV, sitting down with your kids, and hitting them?"
    1. Re:So... a Cisco router as good as a Cisco router? by HKcastaway · · Score: 1

      General Motors owns many car companies. Are all General motors of the same quality as a Cadillac?

    2. Re:So... a Cisco router as good as a Cisco router? by Kenja · · Score: 1

      A Linksys router being as good as a Cisco router is like saying a Cadillac is as good as a GM car.

      My Linksys is a router with a Cisco logo on the front, is that not a Cisco router?

      --

      "Have you ever thought about just turning off the TV, sitting down with your kids, and hitting them?"
    3. Re:So... a Cisco router as good as a Cisco router? by HKcastaway · · Score: 1

      As you said it is Linksys with a Cisco logo on it. Buy Cisco if you want Cisco.

    4. Re:So... a Cisco router as good as a Cisco router? by myz24 · · Score: 1

      The more appropriate question is, is Cadillac of the same quality as any other GM product.

  24. Re:do NOT modify the hardware - or it may cost you by Vlijmen+Fileer · · Score: 0

    Well spoken. Not everybody (in fact, almost nobody) lives in dickhead DMCA coprrupted USA.

  25. Re:ASICs Issues by mpapet · · Score: 1

    get ASICs and whatnot that do the job faster than software

    I agree with you in principal(sp?) but I have a question:

    As we upgrade some machines, I've got dual cpu (1.5ghz =/-) and 2+GB RAM being replaced by dual cores. Would server hardware be able to handle as much, if not more than the cisco asics (2800's mostly) I've got?

    I get a damn good router for free. And I've got a spare parts inventory + redundancy. What am I missing?

    --
    http://www.maxineudall.com/2010/02/should-economists-be-sued-for-malpractice.html
  26. Since when ... ? by MrNougat · · Score: 1

    Since when do we listen to "users?"

    --
    Web 2.0 == Giant Blogspam Circle Jerk
  27. Re:ASICs Issues by Shaman · · Score: 1

    Fully depends on the load you plan to place on it. If you're using something with custom ASICs, it's probably a multi-gigabit switch and you're not going to beat the performance of one of those with any off-the-shelf hardware. Mind you, if your target is a Cisco 2924, then go for it... they'll only handle a little over 1Gbps of actual switched traffic...

    --
    ...Steve
  28. Re:do NOT modify the hardware - or it may cost you by Skapare · · Score: 1

    Your understanding of technology is obviously zilch, zippo, nada, nothing. And that leaves me with the feeling that your understanding of law is also generally diminished. And I presume you've never changed any software on the PC you own?

    --
    now we need to go OSS in diesel cars
  29. You're buying the hardware by thesandbender · · Score: 3, Insightful

    I use Debian at home for a general purpose router and firewall and it is very flexible. There have been times when I've been tempted to deploy it as a small/medium business router in lieu of cisco but it's not just about the software, it's about the hardware as well. For a reliable system you need reliable parts... which are more expensive... preferable a cpu with a low thermal dissipation but still fast enough to handle the load, which is going to cost you money and either a RAID system or (ideally) a flash based storage system, which is going to cost money. You can build a system that will beat Cisco's cost/feature set easily. Building a system that can compete on cost/mtbf ... not so easy... and generally just not worth the effort. The article referenced a "still servicable pc" ... which roughly translate into "a machine that we picked up from behind the receptionists desk and cleaned all the dust bunnies out of.... *shudders*

    1. Re:You're buying the hardware by HKcastaway · · Score: 1

      Bravo! The voice of reason spoke!

    2. Re:You're buying the hardware by Anonymous Coward · · Score: 0

      "Building a system that can compete on cost/mtbf ... not so easy..."

      http://www.soekris.com/ You can build reliable routers and bridges out of these assuming they are within range of your network traffic needs. And at their cost, you can have several on hand ready to go in the event of a failure.

    3. Re:You're buying the hardware by Anonymous Coward · · Score: 0

      - you can get "IDE flash disks" these days that just go in the IDE connector in the motherboard and replace the disk drive
      - the thermal problems will probably be nonexistant. the CPU will be idle 99.99% of the time
      - don't think an old PC has a low MTBF. the fact that it has worked a couple of years behind the receptionists desk means that it is not too unreliable. in my experience, simple PC systems are quite reliable, and access to spare parts is easier than with a router (for which you need to have a service contract to be covered)

    4. Re:You're buying the hardware by Big_Al_B · · Score: 1

      Building a system that can compete on cost/mtbf

      In my Cisco experience, that is _highly_ platform, IOS and purpose dependent. On one hand, I've had several Cisco boxes at the "high" end ($XXX,XXX.XX), several at the low end ($xxxx.xx) and several in between that have stayed up for years. On the other hand, I've had other Ciscos in each of those same price points enter death spirals as often as daily.

      One 7206VXR I had to reboot every three days to stave off a spewing CEF memory leak. The ESR platform is a flat out nightmare when certain features are in play.

      It really matters which features you use, on what platforms, and in what combinations. Especially the combinations.

    5. Re:You're buying the hardware by langseth · · Score: 1

      There is pc hardware that does everything you listed without a problem, is it expensive? Not really at $300. We use Soekris (www.soekris.com) boxes as routers and wireless access points. They are _very_ durable and can more than handle the traffic a small business will throw at it. And considering many of our APs are on top of towers and grain elevators in Northern Minnesota, or worse in the elevator (extremely dusty), and many have been running without issues, beside periodic reboots, for up to 7 years, they are very durable.

  30. Why change from DSL? Reliability... by WoodstockJeff · · Score: 4, Informative

    Strange - why would you expect companies to step down from decent DSL speeds to T1 rates.

    When you need reliability, you have to give up on DSL/cable, because no DSL or cable provider is going to give you service guarantees. If a DSL/cable line doesn't provide it's advertised 2Mb/s download throughput, that's too bad; you might be able to negotiate your bill down. And if it goes down, it's going to be you reporting it to your ISP, not the other way around...

    But a T1 circuit (generally) has both through throughput and uptime guarantees written into the contract. And automated monitoring of its performance, and fast notification that something's wrong, 24 hours a day. I've had DSL circuits be out for days; the longest a T1 circuit was down was 8 hours, and there were severe financial penalties proscribed for that event.

    That's not to say a T1 circuit is perfect; we use a bonded pair of them to feed one site. One went down, due to an incident with a trencher. Verizon promptly fixed it... by moving the circuit to another pair that tested good in the cable. Guess which pair got used... If you guessed the pair that the second circuit lived on, you'd be right, and it went down. This went on for a day, alternating which circuit was up and down, until one of our people met the Verizon tech at the repair site. "You do know that there are TWO T1 circuits here, don't you?" "Oooops..."

    1. Re:Why change from DSL? Reliability... by pe1chl · · Score: 1

      When you need reliability, you have to give up on DSL/cable, because no DSL or cable provider is going to give you service guarantees.

      This is of course hogwash. Just like you bonded your T1s to get better reliability, you can do the same with DSL. You can even get DSL and Cable, or DSL from different ISPs.
      In real life your reliability will be better than the "guarantee" you get from your LL supplier (which usually does not give any compensation in case of problems anyway, so you still are responsible for your own backup).

    2. Re:Why change from DSL? Reliability... by WoodstockJeff · · Score: 2, Interesting

      True, there is no way to guarantee uptime completely, because it all involves wires or radio or something else that can fail in ways that you're not going to be able to fix quickly. Our T1s aren't bonded for reliability, but for speed... a fractional fiber just wasn't available to that site, so multiple T1s is the only way to increase speed. We're hosting, not surfing, so uplink speed is our bottleneck.

      But bonded DSLs have the same problem that a single DSL has - no guarantee of service. Period. And you can have one for each of 40 different ISPs, but they're all routed through the same phone company to get to your premises, which can fail. Our E911 centers have redundant feeds, taking different routes from the telco switch to the center... And we had one taken out completely by a high voltage line that fell and melted the (buried) fiber trunk to the telco switch.

      One of our sites had "business cable" for its internet connection for years. At that time, the 95% uptime wasn't too bad. Now panic sets in to management if someone can't reach the sites for 5 minutes in the middle of the night, so that site has fiber plus a backup T1.

    3. Re:Why change from DSL? Reliability... by pe1chl · · Score: 1

      You know what? When a 737 flies into your building, it will still fail.
      There is no point in being so paranoid, other than to justify burning money.

      BTW, your cable provider is terrible. We easily get 99.95% uptime on consumer-grade DSL lines, and when counting 07:00 to 23:59 only it is well above 99.99%.
      Over several sites, over several years. Of course they don't guarantee it, but we provide our own backups (multiple lines, dialup backup for emergencies)

    4. Re:Why change from DSL? Reliability... by Anonymous Coward · · Score: 0

      It's not hogwash. Your DSL modem blows up- see if you can get Covad to your office in any reasonable time frame (or verizon or whoever).

      Moreover, show me a DSL provider that will announce your networks via BGP. And what do you do about inbound services? If you go through different ISP's for redundancy then you will end up with different IP's and have to use dynamic DNS solutions which are anything but reliable.

      One of the companies I consult for has 2 T1 lines going out opposite ends of the building, to different CO's and to different ISP POP's. On top of this they have a 3 megabit Wireless (no not Wifi) link to another ISP. We use BGP to announce our networks to both providers. Why, you ask, do we go through all the trouble? Simple- we have 30 regional offices all of whom connect to our primary site via VPN's and who depend on the services available there. The cost for a single hour of downtime is far more than what we pay for our connections in a year. Considering a nearby building lost access for 2 full days because some guy on a backhoe dug up the wrong cables- it becomes a simple equation.

      You should also look at the costs involved- T1's are not too expensive if you are close to the CO or are buying a lot of lines through a carrier. In our case the monthly cost is insignificant.

      Does DSL suck? Absolutely not. For small businesses it is perfect. For larger businesses it is even more useful. The above mentioned company also has a cable modem and DSL connection. These two lines sit in front of a Linksys multi-ISP router which sits in front of our proxy server. All of our web browsers are pointed at the proxy server (via Active Directory group policies) which uses the DSL And cable for Inernet access. Our users get a very fast net connection and the best part is that it doesn't use up bandwidth on our T1 lines.

      -sirket

    5. Re:Why change from DSL? Reliability... by kayditty · · Score: 0

      Announce your networks? That'd require having one. You don't even get those with residential service. If you're lucky, you get a few "static IPs." And dynamic DNS? That's nothing. What about reverse DNS? What DSL or cable modem providers give you that these days? There used to be a few of them, I know, but I don't think I know of any that do now.

    6. Re:Why change from DSL? Reliability... by Anonymous Coward · · Score: 0

      http://www.sonic.net/ --- static IPs, routable networks, reverse DNS on any static address, configurable ISP-side firewall rules, locally owned ... If you call them, you get a reasonably knowledgeable person on the line. If you don't see something you want on their web site, talk to them. The owner posts in newsgroups and on DSLRreports.

    7. Re:Why change from DSL? Reliability... by cthulhu11 · · Score: 1

      When I had my DS1 installed, Verizon sent 1 or more people out no fewer than *six* times before it was actually turned up. The last crew were the ones connecting the copper, and actually *asked me* what the pinouts should be on the cable. Ended up taking them 3-4 tries to get it right.

    8. Re:Why change from DSL? Reliability... by 1310nm · · Score: 1

      I agree with your points, but only based on the assumption that your chain of management requires serious accountability that you don't want to rest on your head. :) SLAs with uptime guarantees on T1s are a whole other ball game from ordering DSL and having to go through the whole "please reboot your computer and check for spyware, sir" when your latency to the gateway sucks, or the flow of packets stops inexplicably several times throughout the day.

    9. Re:Why change from DSL? Reliability... by pe1chl · · Score: 1

      It's not hogwash. Your DSL modem blows up- see if you can get Covad to your office in any reasonable time frame (or verizon or whoever).

      I don't know the situation in your country, but over here a DSL modem is free with every new subscription.
      Because there are many ISPs and all kinds of special offers, people tend to switch between ISP quite often (every 1-2 years) and there is a big number of unused DSL modems lying around computer rooms, closets at home, etc.

      And otherwise, you could walk to the computer store around the corner and get one.
      Getting a new DSL modem when one fails is about the least of your worries.

  31. Absolutely true. by Shaman · · Score: 2, Insightful

    If you're not paying at least $100s of dollars a month, you aren't getting any sort of guarantees.

    --
    ...Steve
    1. Re:Absolutely true. by aesiamun · · Score: 1

      Doesn't matter. Commercial Cable services offer no more guarantee for uptime or throughput than their residential offerings.

  32. Where should Vyatta go? What direction? by HKcastaway · · Score: 1

    I think most points have been covered now.

    I think the way we can help Vyatta is by giving them suggestions as to where they should go in the market.

    What direction should they take in your opinion?

  33. Best WRT54G/s Firmware I've found by SweetsGreen · · Score: 1

    I actually just flashed my GS v1 to DD-WRT yesterday. I;ve tried many other firmwares...Talis/Freeman, Alchemy, HyperWRT. They all had the same problem when in client mode I would loose the wireless connection to the AP and would have to re-boot to get it to reconnect. DD-WRT is the only one that works without a hitch, although I noticed HyperWRT had faster thruput (when it worked). It also doesn't get clogged up like everyother firmware when using Bittorrent or P2p

    1. Re:Best WRT54G/s Firmware I've found by macsat · · Score: 1

      You should give OpenWrt a go (www.openwrt.org). It adds the stability of DD-WRT and the performance you know from HyperWRT. Really worth a shot !

    2. Re:Best WRT54G/s Firmware I've found by Anonymous Coward · · Score: 0

      I have never heard of this problem. But I use a cisco 2600 for my network connection that I stole from an old employer, then I stole the code for it on the net. Then I hacked it together and voila ! A cable modem router that kicks the snot out of the past three that you have tried.

  34. Re:ASICs Issues by silas_moeckel · · Score: 1

    OK first of 2800 series routers realy dont have much in the asic department they realy are software routers with some asics avalible to speed up things like crypto. Realy a PC can deal with just about anything that a sub 7200 can handle. Latency might be a bit higher but that could be solved with some firmware as x86 procs are not happy dealing with gigabit speeds and min MTU sized packets due to the number of interupts generated, now I would not want to do that with a 2800 either.

    The problem with PC's is more that the only inferfaces that you can get are ethernet and if your going to compare a PC to a 65xx series switch it's going to get burried of course it also costs 10-20 times more than a good pc server.

    Now a 3550 that has an EMI image would be the closest thing to a PC it's about 4-7k with 24 fast e ports or 12 gig ports the server your going ot need to route 24 gigs of traffic is gong to cost more than that from a Dell or HP as your talking about a lot of slots (5 2 port gig cards plus the onboard pair) and is going to need 3GB a sec of backplane and memory access just for traffic and I dont even want to think about the interupts per second.

    Cisco has it's place and it's not low density localy manged 100bt routing.

    --
    No sir I dont like it.
  35. Re:ASICs Issues by Score+Whore · · Score: 1
    Would server hardware be able to handle as much, if not more than the cisco asics (2800's mostly) I've got?


    You are ignoring the other half of the equation. Specialized hardware typically requires less power to do a given task than general purpose hardware to do the same task. Ie. a 600 Mhz P2-generation Celeron + Hauppage PVR150 MPEG2 encoder with 192 MB RAM that sits at 97% idle while converting analog tv to 720x480 MPEG2 vs. a 2.2 Ghz Athlon 64 X2 with 2 GB RAM that cannot convert analog tv to 720x480 MPEG2 in realtime.

    So, yeah. It is very likely that a high-ish end PC will be able to compete evenly with a low-ish end Cisco router, but you're going to pay more in power. More than you'd pay up front? Dunno. But if your business relies on your net connection being there and working properly, then I'd go with the Cisco, solely for the fact that Cisco has motivations to make sure their shit works that OSS developers don't.
  36. Looks Cute. by DoctorDyna · · Score: 1

    This package looks great, and I've got a couple of things to comment on that have been being said. Firstly, everybody seems to be talking about this like its some kind of CATOS/IOS ala Cisco replacement. They don't seem to be billing it like that at all, as far as I can tell. Of course, the dedicated "meant to do that" hardware solution from Cisco is going to be legions better than any software you can stuff on a PC.

    Lets take the discussion where it probably should have gone, to the guys contracted to set up a network for a local law firm office, with 20 employees. Maybe a veterenerian's office that probably doesn't do that much business (dollar wise). It's the folks like this that might still need what a Cisco has to offer in features, but doesn't need what Cisco offers in capacity, and definatly not what they offer in cost. Considering how (it looks to be) well documented, I don't think that the contractor mentioned will have any problems supporting it. It's our bread and butter.

    --
    Windows has more viruses because linux has more virus coders.
  37. Re:do NOT modify the hardware - or it may cost you by blackbear · · Score: 2, Interesting

    According to Cisco it is in fact your hardware, but it's still their software, and you can't sell it or transfer it.

    This bit me a couple of years ago when I bought a 2611 on e-bay, and wanted to put the latest security fixes on it. Not being Cisco certified, I contacted Cisco to find out about getting or purchasing updates. I was told that my router was "gray market" and that I would need to buy another license for it.

    "How much is that?", I asked.
    "$1500.00."
    "Holy shit!" (hangs up phone, lest they send the software gestapo.)

    I had my lawyer review the license agreement that happened to be included in the box. He concurred. I was screwed if I wanted to use this router legimately.

    I have the money to buy as much Cisco gear as I need, but this pissed me off so much that I haven't bought any since that day. Nor have any of my customers.

    Cisco is not the only game in town, and they aren't the best any more. The people saying they are; either are not looking, or don't know anything else. Cisco just seems to be the only company with a product line extending from the very low to the very high-end.

  38. Summary from last time this was posted.. by Anonymous Coward · · Score: 0

    Some people claim using a PC can't do that speed/capability with a PC and software and it requires dedicated Cisco hardware. Others posting that they ARE using a PC with software AND getting those speed the other half said was impossible.

    Who do you believe?
    IMHO, I think the people that said it can't be done have not tried it so they are assuming it can't be done. There are many theories of why it should not work, why it should be impossible, why it would be so hard to maintain, but these are theories. No practice or experience. But what about the back-plane! Has anyone tried to achieve some capability with a PC based router and it did not work? What were you trying and at what point did the PC based router start to die off?

    Other notes..
    1) People that acknowledge that a PC/software router will work but like the comfort of separating themselves from any technical involvement if the thing breaks. 24x7 coverage by TAC and nothing less.
    IMHO, that has merit but it is not a technical limit of the PC based solution.
    2) There seems to be an assumption that every company needs to route at least 10 or more Gbit connections around the world though one piece of hardware. IMHO, the number of companies that need to do that is probably less then 1 per 2 thousand companies. Yes, /. has a bunch of technical readers that come from internet and tech companies but there are far more companies out there that use a fraction of that bandwidth. Use all companies with internet access and routing needs when thinking about that, not just "internet" or technical companies.

  39. What DSL modem to use? by pe1chl · · Score: 1

    When using a PC as a router, what DSL modems do people use?
    I am trying to find some ADSL2+ modems to connect to our Cisco routers.
    (in the past we have used Cisco ADSL WIC, but it has become clear that a consumer-grade Alcatel modem outperforms those, and even worse: there is NO ADSL2+ WIC...)

    The modems have to support PPPoA and provide a transparent "bridge mode" where incoming traffic is delivered on the ethernet port with the Internet IP address as destination. This would be the same mode you would want for a PC-based router between LAN and Internet via DSL.

    The problem is that it becomes difficult to find a "dumb" modem like that, especially with a reasonable build quality.
    Everyone has NAT routers with 4-port switch, Wireless access point, VOIP gateway, printer port and what not, but I just need a dumb modem with no frills that increase the failure chance or that interfere with transparent operation.

    For example, the more recent Alcatel/Thomson models appear to offer a transparent mode, but it has proven to be unreliable. I think the NAT engine is in the path in a 1:1 mapping mode. After some days of operation it appears to drop packets of longstanding connections while still servicing new connections.
    We never had those problems with our old Alcatel 510, but that is not ADSL2+.

    Any idea where to go for a reliable, transparent, ADSL2+ MODEM??

    1. Re:What DSL modem to use? by MeatGrinder · · Score: 1
    2. Re:What DSL modem to use? by pe1chl · · Score: 1

      Those are not WICs, they are HWICs.
      For the owner of 17xx and 37xx, they are not very useful. And those boxes are too recent to throw away just because we want ADSL2+.

      Besides, support for PPPoA over DSL is troublesome to say the least. You get a "Dialer" interface that is treated as inferior all over IOS.
      An external modem works much better as IOS sees it via ethernet and is not bothered by the PPPoA handling.
      (sad, but true)

    3. Re:What DSL modem to use? by exKingZog · · Score: 1

      We went with a Thompson SpeedTouch 504 (I think, I can't remember the exact model number). A very plain but sturdy router for about £55. I had exactly the same problem as you - I wanted a basic, non-NAT router since the "client" (a new company we were setting up) were using their server as a NAT router/firewall, and we wanted to plug an additional linux box into a public IP to run Wordpress for their website. So far it's never gone down since February, whereas I've gone through 3 NAT routers at home (D-Link, then Netgear, now Linksys - eventually I'll find a decent one!).

      --
      "If he were a plant, people would roll him up and smoke him."
    4. Re:What DSL modem to use? by Icekold · · Score: 1

      I'm using a Linksys ADSL2MUE which seems to fit the description of what you want.

      Here's a review

      Here's where I bought mine.

      Hope that helps.

    5. Re:What DSL modem to use? by pe1chl · · Score: 1

      I bought one after reading the product description. ADSL2+ MODEM, it seemed ideal for the purpose.

      However, when it arrived I quickly found that it is able to do transparent bridging and that it can do PPPoA, but no combination of the two.
      When PPPoA is enabled, there is a hardwired NAT function for which you cannot even define incoming portmappings :-(

      It seems that the OpenWRT folks are busy writing new firmware for it, but they have nothing available yet that they recommend end-users to install.
      Maybe I will try it anyway...

      Or is there a newer update that allows PPPoA without NAT? Do you use PPPoA?

      It actually runs Linux. Unfortunately the programs that bring up the link, setup the bridging, etc are binary executables for which no source is published.
      If they were shell- or perl scripts I would probably be able to hack them and rebuild a new firmware image.

    6. Re:What DSL modem to use? by celery+stalk · · Score: 1

      The modems have to support PPPoA and provide a transparent "bridge mode"...

      It could be that I'm wrong, but I thought that these two would be exclusive. If you want the router to work in bridge mode, translating the DSL signals to Ethernet, it won't perform PPPoA authentication, and whatever you have behind it will have to do PPPoA authentication. If you want the modem to authenticate, then it has to perform NAT to the internal network.

      --
      aaaand...whee!
    7. Re:What DSL modem to use? by pe1chl · · Score: 1

      What I need is a modem that sets up a PPPoA connection, does the authentication, and bridges the packets from that connection to the ethernet.
      So, there is only a single system (or in this case: cisco router) connected that has the public IP address on its ethernet interface where it receives all packets from the line, and it sends all packets with a "next hop" address equal to the address of the modem. The modem then forwards them over the PPPoA connection.
      This makes the whole PPPoA and authentication issue invisible to the router.

      Thomson/Alcatel modems can do this. There is a DHCP_Spoof mode where it does the above and runs a DHCP server that gives the public IP to the connected device when that requests a DHCP lease. There also is a mode often called SIP_Spoof where the IP address is assumed to be static and DHCP is not used. This mode is not documented by Thomson/Alcatel, but reverse engineered by users.

      The newer firmware for those modems has a different structure, and although the DHCP_Spoof method still exists, it is now a real pain to setup when you want to use it with a router (vs a single PC where you can run a browser and a DHCP client). But worse, it no longer is completely transparent.

      So what I need is a simple modem which is completely transparent and has no NAT, not even a NAT engine that is told to map all addresses 1:1 like in the new Thomsons.
      The Linksys ADSL2MUE seemed to fit the bill when I read the sales blurb, but unfortunately its firmware lacks the mode I need.

    8. Re:What DSL modem to use? by Icekold · · Score: 1

      I'm using PPPoE, however my ISP connection is with PPPoA - the trick was to set it up with PPPoA with NAT first, make sure it connects ok, then switch it into bridged mode. I then set up my WRT54GL to use PPPoE, put my ISP account details into the WRT54GL, hot connect, and I was connected first time, with the ISP assigned public IP straight on my router.

      Would that work for you?

    9. Re:What DSL modem to use? by pe1chl · · Score: 1

      Unfortunately that means that you need to bother the router with the PPPoE.
      For Cisco IOS routers, this is troublesome (I know it is no problem with home routers).
      You get a "dialer" interface to route your packets to, and in many ways it is inferior to a normal ethernet port.
      (when we bought the routers we got ADSL WICs with them, ADSL modems that plug into the router, and to use PPPoA we got the same dialer config and a lot of trouble, solved by using external modems)

      The Cisco prefers to just bounce ethernet frames around. The modems should do the ADSL-specific handling.
      Right now we have Thomson/Alcatel SpeedTouch 510's doing the job using http://jp.dhs.org/~jp/510_tpl.html . They work fine.

      However:
      - they are ADSL, not ADSL2+
      - they are not available anymore
      - they are home products, with the associated build quality

      I know there are Speedtouch 516/546 modems with old firmware that still do what we need. But when ordering one, you might get a "new" one that has the unstable new firmware. This also is a "while supplies last" situation.
      It would be nice if there was a modem that is just a modem. Preferable with a build quality that you would use in a business situation.

      A lot of Googling still did not yield the answer, although the Linksys ADSL2MUE seemed right on target. With better firmware, it would be.

  40. Re:do NOT modify the hardware - or it may cost you by LWATCDR · · Score: 1

    You are kind of nuts.
    Many people, thousands of them in fact have bought LinkSys and other routers and have modified them with new more functional software.
    As far as I know the DMCA has been used only once to "protect" hardware from modification. It never went to court and the company pretty much went out of business.
    The modification of purchased hardware is protected under the first sale doctorin. The same laws that allow you to buy a car and then sell of the parts one buy one.
    The DMCA would only come into play if some form of encryption was broken. Just deleting the firmware on a system and replacing it with new firm ware would not be covered.

    If this isn't true then why hasn't Microsoft shut down all the sites offering Linux for the XBox?

    --
    See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
  41. That explains it by ClosedSource · · Score: 1

    I see. You guys don't use money in the 23rd century, so it doesn't matter if nobody buys your router.

  42. Bull-oney by Anonymous Coward · · Score: 0

    That's all well and good if you need ethernet in, and ethernet out, and are doing a static route, or RIP with 2 possible routes. Try and run EIGRP, or OSPF with multiple DS1's, or a DS3, bonded DS1's, OC-3, OC-12, GigE interfaces? What if you need to convert ATM to Ethernet?
    I've tested throughput on a GigE port on a variety of desktops and laptops, and aftermarket GigE cards. It's terrible. Proper hardware to ensure even 60% of GigE throughput is EXPENSIVE.
    NAT, PPPoE, terminating VLANs, routing a lot of little subnets, terminating RBE sessions... all of that stuff adds up. Throwing away a 7204 and saying you can do it all with a Linux box? No way.

    Now, a Linux box can route fine between several Ethernet ports. And maybe you have 2000 LT2P sessions going, but that's probably all you need to do.

    Software routers might be fun to play around with, but how many people want their internet provider to ditch Cisco and take the software router plunge?

    Anyone?

    Anyone?

  43. Race car can also replace a semi-truck by billstewart · · Score: 1
    Hardware-based routers and PC-based routers are really solving much different problems. The hardware routers can handle large volumes of packet-shuffling in ASICs, without having to bother the CPU - on the other hand, if you want CPU and RAM, it's much much more cost-effective to buy a PC (even if you ignore the fact that Cisco gouges on price for standard commercial RAM.) PCI backplanes aren't made to handle all that much router traffic - they're overkill for connecting a DSL or cable modem connection, or a LAN with a few PCs on it, but don't expect lots of throughput between multiple gigabit ethernets. On the other hand, the new PCI-Express GigE cards talk about throughputs like 2 Gbps, so they're starting to catch up - a couple of $79 adapters in a $500 PC may not beat a Cisco 12000, but they could be real competition for a 7200.

    Cisco sometimes adds customized processors for special applications - hardware encryption chips are especially useful for triple-DES, compared to doing the encryption in a CPU, though they're less critical for AES, and the CPU still gets involved in packet handling so it can sometimes still be a bottleneck.

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  44. Smoothwall? by m0topilot · · Score: 1

    We maxed out on our small soho router at a small company I worked at. I then turned to smoothwall (www.smoothwall.org) and loaded
    it on a 700 Mhz pentium 3 system. Worked wonders. Lots of features and addons/extensions from the community. They also have a commercial version with a gang load of features http://www.smoothwall.net/products/corporatefirewa ll4/?featurecomparison. I'm surprised it wasn't mentioned on this topic before. I'm not sure how vyatta compares though.

  45. Re:do NOT modify the hardware - or it may cost you by G00F · · Score: 1

    Cisco just buys out al lthe companies it can to extend it's portfolio. The PIX, IDS, wireless (both), MARS, etc. Infact even the 6500/7500's.

    The only thing they have is
    1. You wont get fired for buying Cisco
    2. Support
    3. They are top notch, maybe not always the best, but they are top notch.

    But yea, making people buy the router again when they buy used is scummy. Even if you buyt a PIX-501, ithe software will cost more than the hardware new from cisco at full price.

    --
    The spirit of resistance to government is so valuable on certain occasions that I wish it to be always kept alive
  46. Let's get a few things straight here... by funkboy · · Score: 1

    Vyatta is not just open-source routing software, they are a company that supports said software. Yes, if you have a support contract you can call them at 4 am if your network breaks.

              The term "open-source router" is extremely vague. A router is a physical device that forwards packets at layer 3. In the case of the Vyatta OFR (as wel as Zebra, OpenBGPd, etc), the routing software (roughly, the RIB) is Vyatta, the forwarding software (roughly, the FIB) is the Linux kernel, and the hardware is a PC. In addition to various silicon-based solutions to speed up packet forwarding, software projects such as the Click! modular router exist that replace the routing code in a commonly available kernel (Linux, BSD, etc) that increase packet forwarding performance exponentially. The fact is that the commodity packet forwarding code in off-the-shelf OSs (OSS or commercial) hasn't evolved much in a long time, because it hasn't needed to.

              Procket (founded by Tony Li, bought by Cisco for the engineering team) had also developed software forwarding based products that had similar performance without using custom forwarding hardware (1+ mpps on x86). Too bad they will never see the light of day. Of course, their hardware was also capable of 12bpps (yes, billion) in 2003....

  47. Hardware support lacking by drwho · · Score: 2, Interesting

    Too bad they only support Sangoma serial cards.

  48. There is no "S" in Firmware! by Anonymous Coward · · Score: 0
    From the summary,
    can be reconfigured with one of several open-source firmwares to do things impossible with the hardware as delivered.
    Words like hardware, software, firmware, furniture and equipment do not have pural forms. No trailing "s" please!
  49. What you requested is already there. by Anonymous Coward · · Score: 0

    When they are talking about "Linux routers replacing Cisco" They are realy realy realy realy meaning Linux replacing ALL cisco kit.

    ""Wow- switches for high speed stuff? Jesus what networks do you work with? Where is my OSPF, EIGRP, and BGP on Linux?""

    Quagga provides:
    OSPF support. Version 2 and 3, RIP, RIPng, and BGP

    EIGRP is propriatory to Cisco. Free software would not be able to legally provide that functionality.

    Also there is OpenBGP for Linux which is BGP-specific. (originated from OpenBSD)

    ""Where is my VRRP, HSRP and GLBP?""

    HSRP is propriatory to Cisco. Free software would not be able to legally provide that functionality.
    VRRP infringed on Cisco's HSRP-related patents. They own your ass. SUCK IT!

    I don't know about GLBP.. But I do know that the currect term for it is "Cisco Gateway Load Balancing Protocol"
    You can probably guess the rest of that one.

    What you want to use is CARP (again coming from OpenBSD). It's a Free redundancy protocol. Very effective.

    ""Where are the DS3 and OC3 interfaces?""

    Linux has supported several devices that would provide that functionality. Look for 'Linux WAN' support.

    ""Linux works fine for smaller isntallations. If all you are trying to do is connect your office to the Internet then we're not even on the same page. If you work at an ISP, large corporation, or otherwise handle core routing requirements you would never even consider using Linux.""

    Don't try to out-1337 the Linux hackers and programmers for Linux systems. They kick Microsoft's ass in some markets (embedded, enterprise storage, super computers, etc etc), I don't think you have a chance.

    Linux now runs the most powerfull computers on the planet. Linux based systems regularly break storage network speed records. It's been used to break point to point TCP networking records. Don't you think that some people highly knowledgable with networking would not be able to provide teh resources nessicary for running something like a ISP?

    Maybe you never ever considured Linux... because you never ever considured linux and have no idea of the capabilities of it?

    Maybe it's time.

    The limitation is mostly in the hardware. No custom ASIC units. Still though.. Those 2ghz Pentium cpus can proccess ACLs faster then a dozen of your average cisco routers. TCP offloading nic cards are aviable and all sorts of stuff. Linux has proven performance.

  50. So what are they paying you for??? by Anonymous Coward · · Score: 0

    Network administrator ... HEH!

    Sounds like your the guy with the rolodex in charge of calling the help line!

    Anyway .. for those with need of features on budgets and not requiring bonzai bandwidth, a software solution on commodity hardware may suit many just fine. If it breaks, fix it. You built it and can probably build another one complete from the spare parts closet in four hours or less.

    Of course it is easier to put in emergency requests for flight line hardware met at the door by onsite technicians as long as your company has no problem cutting the checks. Besides, those losses can be readily offset by firing your worthless ass and giving the sacred rolodex to the night janitor.

    On the other hand, if your company is really that upscale, mission critical and money flush, why don't you just inventory replacement hardware and skip the blue nosed service and support contracts?

    Well the truth is, many of you water cooler cowboys walking around with your head up your job title, just can't get it done when you get right down to it.

    Fact.

  51. serial cables by Anonymous Coward · · Score: 0

    You obviously have a bone to pick with Cisco, so I'll leave most of it alone. There is just this one comment of yours that blew your whole credibility:
    those magic serial config cables that cisco guys use can be tough to come by in an emergency, but a floppy disk, keyboard and a monitor are easy.

    Maybe it's just a sign of the times, but I don't know any system/network administrator worth his salt that didn't have a pile of serial cables and adaptors laying around. And if I bought an expensive piece of hardware that required a serial console for _setup_ and I didn't keep a serial cable with it for emergencies, then I would sure hope I wasn't fired after an emergency. Those serial cables aren't magic, expensive, or complicated.

  52. Re:ASICs Issues by Cramer · · Score: 1

    I'm not sure about cost, but you only need 2 slots using one of these -> Six Port Copper Gigabit Ethernet PCI Express Server Adapter

    I'm using the PCI-X versions of those cards right now. PCI-X is a bit limiting, but we need the ports more than the bits.

  53. Meh... by msimm · · Score: 1

    Its simpler then that. Appliances, enterprise grade hardware or software. That's job security.

    Sure, you might save a few bucks and maybe, if you're good, come up with something better. But try explaining that to your non-technphile CEO when something (and something always does) goes wrong.

    If my gear fails and I did the best that I could (firmware upgrades, software updates, hardware lifecycle, etc) its no sweat off my back. We rush to repair our systems and someone wags their finger at Sun or Cisco or whoever for a little while (or reconsiders their purchasing policy and my recommended updates). :)

    If I cobble together a great system ...right, its just me holding the bag.

    There will ALWAYS be exceptions which is no doubt why this projects even being mentioned (and I'm not knocking it), but all you enterprise hot-shots probably already know better. Money doesn't just get you quality hardware (which it often does) it gives you *and* your company a little buffer.

    It sounds better when you explain to a client that your primary Cisco router failed then trying to explain your custom gear (unless of course, you lie, then your covered...but lying, which according to Wired is only good if your an MBA).

    --
    Quack, quack.
  54. Re:Bias, bias, bias by bit01 · · Score: 1

    Just because it's OSS doesn't mean you can't pay for on-site support, on-site hot backups, the works.

    Whether it's OSS or closed source is irrelevant in that regard.

    Except with OSS you are likely to have more flexibility and better value for money.

    "Support" is often a boogeyman pushed by salesdroids when they don't have anything better to offer, trying to scare a customer into getting locked in to their expensive, proprietary solution while ignoring the flexibility, including support, that OSS can offer.

    ---

    Don't be fooled, slashdot has many lying astroturfers fraudulently misrepresenting company propaganda as third party opinion. FUD too.

  55. That reminds me... by NerveGas · · Score: 1

    ... of an almost perverse little daydream that I had some time ago. I thought that it would be fun if someone were to made T1, T3, and other interfaces that connected via... USB. A USB connection has enough bandwidth (at least on paper) to run a T3 with ease, and you could pop 32 (or more) USB 2 ports in a machine very easily. And for the lesser-bandwidth interfaces, you could run them off of a USB hub.

        So, imagine a single machine with 30, 50, or 60 network interfaces coming out of it, all sprouting USB cables. What a mess.

        The more that I think about it, that's not so much of a daydream as a nightmare.

    steve

    --
    Oh, you're not stuck, you're just unable to let go of the onion rings.
  56. Cisco Salesperson Here by mattsday · · Score: 1

    Hello, in my experience people don't really buy Cisco routers because they just want to shift packets. The days of edge routers dumbly sending packets out to the internet for buildings of 100-500 users are over.

    Instead they want built-in VPN concentration, firewalling, the ability to automatically dial-out their VoIP calls if the WAN goes down, flexible WAN links, content caching &c &c &c.

    While a software router is a great solution for switching packets, it quickly stops scaling in a single box when you want to add the extra features offered by Cisco's 2800 and 3800 series, which this product is touted to compete with.

    Here's an example: A big bank wants to install routers in one of its branch offices. Naturally, it'll need a firewall. Then it wants to push content to each bank for digital signage, such as videos to play on their flatscreen TV's. It also wants Quality of Service and redundant PSTN links for their IPT solution and local call processing, just in case the WAN link fails. The branch has only, say, 25-50 users, but the dedicated single-box hardware is more effective for them because they are able to buy the unit and incrementally upgrade it, adding these features with no performance loss and have it all supported from a single phone call... No need to handle different vendors. As around 80% of the cost is running solutions as oppossed to procuring them, this is a good deal.

    This is why software routers are addressing the wrong market. How many businesses now intend to just shove packets out to the 'net?

    --
    Now there's one hoopy frood who really knows where his towel is!
  57. Cisco switch performance review by Alex · · Score: 2, Interesting
    1. Re:Cisco switch performance review by Anonymous Coward · · Score: 0

      There is zero explanation of the testing methodology, much less the goal of the test. Citing packets per second is a bad measurement without defining the size or size range of the packets. Especially considering that fully realizing gigabit speeds is best accomplished by using jumbo frames (9000 byte frames vs typical 1500 byte frames). In any case, the 48 port 3570 switch the author tested is intended for user connection aggregation in a lan closet, not core data center operations. And the 13k price is list, expect to pay 25% less then that. In short, the author is at best woefully uninformed and at worst a crank.

      http://sd.wareonearth.com/~phil/jumbo.html
      http://www.thenerds.net/index.php?page=productpage &affid=3&pn=WSC3750G48TSS&srccode=cii_9324560&cpnc ode=12-12880717-2

  58. tripe..... by Chanc_Gorkon · · Score: 1

    I would NEVER take our main CCisco driven backbone down and replace it with Open Source. Again, support is the issue. If there's an issue with the router, Cisco probably definitely knows about it....even the obscure. Sometimes they don't, but they still help you anyway. Can support contracts be had for a Open Source router?? Will the support actualy help me or tell me something like L1nux R0x0rs, RTFM y0u n00b?

    --

    Gorkman

    1. Re:tripe..... by Anonymous Coward · · Score: 0

      Support contracts can be bought - that seems to be the point of Vyatta:
      http://www.vyatta.com/products/plans.php And, according to the original article (which you obviously did not read) the support is pretty good so far:
      http://searchopensource.techtarget.com/originalCon tent/0,289142,sid39_gci1218088,00.html

      Read the content instead of just pushing flamebait y0u n00b :)