[AusNOG] LNS Thoughts

[Julien Goodwin]

On 08/09/10 12:42, Sean K. Finn wrote:
> The SRX's have gigabit sfp's but the SFP backplanes are limited to  
> 100mbs. Only the modular SRX650 has higher than 100mbps from my  
> research.
> 
> When they say branch, they really mean Branch, and by that, 100mbps.

There really are three SRX lines.

1. "Branch" - All less then 1Gb[1], all high-speed ports are copper

2. SRX650 - An odd midpoint, can do well over a gig, we have one in our
office and often saturate it's IO (2x1g) with NFS traffic[2]. At some
point they'll upgrade the service engine and should double (or more) the
throughput.

3. The DC versions, 3k and 5k. The 5k is actually an MX with a blue
paint job, but both are hardware routing, line rate forwarding.

One word of warning, I have a customer that tried to combine (Internet)
BGP and firewalling on a single SRX, *bad* idea[3]. We've kept ours to
only have the relevant OSPF area and haven't had any issues.

Thanks,
Julien

1: SRX240 should break 1Gb, and with the DC input has dual power feed

2: Which the SRX inspects, we allow NFS related RPC calls and no other

3: That was a certain carrier's idea apparently, not my place to talk