[AusNOG] routeros v Vyatta

Wed Jan 29 20:37:18 EST 2014

IOS workaround for safe mode for me is reload in 5 /10/15, then do your work and if you drop yourself from it then you just wait the time out till it reboots with its startup-config. 

Safe mode has to be one of my favourite features in routeros, followed by the pretty comprehensive API. I run it exclusively on routerboard devices though. 

Alex Samad - Yieldbroker <Alex.Samad at yieldbroker.com> wrote:

>So I am gather this is a good fit for a centos / Linux home made
>router.
>
>I am pretty happy doing all the other things, just the BGP / OSPF stuff
>looks like a pain with qagga. I might look at this again once I have
>checked out vyatta
>
>Paul
>
>Is not that I absolutely love routeros cli, its just sooo much better
>than different config files in different places etc etc.
>
>
>If it work with ssh and makes some sort of sense then it usually okay
>with me.
>
>Ios is getting a bit dated for me..
>
>I do like safe mode in routeros... nice feature .. I believe something
>similar is possible in ios as well, but from memory it's a reload...
>
>A
>
>> -----Original Message-----
>> From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of
>> Nathan Brookfield
>> Sent: Wednesday, 29 January 2014 4:34 PM
>> To: 'Tom Berryman'; 'Mehmet Akcin'; Paul Gear
>> Cc: ausnog at lists.ausnog.net
>> Subject: Re: [AusNOG] routeros v Vyatta
>> 
>> +1 for Bird, very versatile plus VRF's.
>> 
>> -----Original Message-----
>> From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of
>Tom
>> Berryman
>> Sent: Wednesday, 29 January 2014 4:20 PM
>> To: 'Mehmet Akcin'; Paul Gear
>> Cc: ausnog at lists.ausnog.net
>> Subject: Re: [AusNOG] routeros v Vyatta
>> 
>> Support for multiple VRFs?
>> Tom
>> 
>> -----Original Message-----
>> From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of
>> Mehmet Akcin
>> Sent: Wednesday, 29 January 2014 3:45 PM
>> To: Paul Gear
>> Cc: ausnog at lists.ausnog.net
>> Subject: Re: [AusNOG] routeros v Vyatta
>> 
>> http://bird.network.cz - rock solid. Carrier grade. Czech made.
>> 
>> mehmet
>> 
>> On Jan 28, 2014, at 8:40 PM, Paul Gear <ausnog at libertysys.com.au>
>wrote:
>> 
>> > On 01/29/2014 02:05 PM, Alex Samad - Yieldbroker wrote:
>> >> Hi
>> >>
>> >> Been using routerOS for nearly 6 months, like the interface and
>cost :)
>> >>
>> >> But I am now running into limitation in routing speed, I can't
>seem to push
>> them past 1Gb/s running them on ESX 5.5 with the e1000 driver, I am
>looking
>> into trying the e1000e driver there is some hope I might be able to
>get more
>> than 1G.
>> >>
>> >> So I come back to the list to find out if people have been using
>Vyatta and
>> how they find it.  How does it compare to routerOS.
>> >>
>> >> Key features I am looking at
>> >>
>> >> OSPF
>> >> BGP ... including filtering etc etc
>> >> Firewall
>> >> Routing
>> >
>> > Hi Alex,
>> >
>> > My take: Vyatta is more stable and offers better customisation,
>RouterOS
>> concentrates on cramming features in.  Which approach you prefer
>depends
>> on your requirements.
>> >
>> > I very much prefer Vyatta Core (actually, the VyOS community fork
>[1]) to
>> RouterOS, mostly because I like the interface better, and the Linux
>> underpinnings are exposed (including standard Linux shell scripting
>and the
>> like).  Not only that, with VyOS there are full instructions for
>customising the
>> distribution to exactly your requirements.
>> >
>> > I haven't pushed the performance hard yet - the most I've done is
>saturate
>> a 100 Mbps Telstra fibre from our head office to our data centre
>through an
>> IPsec tunnel, but soon I'll be pushing up to 1 Gbps between data
>centres.  I
>> expect this to go very well with modern hardware.  Brocade claim that
>they
>> can get up to 40 Gbps in a VM using their proprietary Vyatta
>Subscription
>> Edition, which implements hardware offload on recent Intel CPUs. 
>Have your
>> American Express card handy.  Ubiquiti claim that they can get 1 Mpps
>on
>> their EdgeOS (forked from Vyatta) devices, which include hardware
>offload
>> as well.
>> >
>> > The OSPF & BGP implementation in VyOS is based on Quagga, so it's
>single
>> instance only.  This usually isn't a problem with virtualised
>routers, but it's a
>> limitation that RouterOS overcame in recent versions.  However, the
>OSPF
>> implementation is more stable in my opinion.  In one RouterOS OSPF
>> deployment, I spent weeks trying to troubleshoot a tricky problem
>with LSA
>> propagation and ended up spitting the dummy and just overriding the
>> behaviour with a static route.
>> >
>> > I've found BGP on VyOS does what I need it to, but I have a very
>simple
>> BGP setup.  It has all the standard route-map and prefix-list
>features, and I've
>> been told it has no problems keeping a full table, although I haven't
>done it.
>> >
>> > The zone-based firewall on VyOS has kept up to speed with
>everything I've
>> asked of it.  At one client I've developed firewall generation
>scripts that we
>> use to maintain about 30 VMs with a very small number of
>spreadsheets.
>> >
>> > Regards,
>> > Paul
>> >
>> > [1] http://vyos.net/ -  They forked Vyatta Core because Brocade
>seems to
>> have basically stopped work on it to focus on their proprietary
>version.
>> > _______________________________________________
>> > AusNOG mailing list
>> > AusNOG at lists.ausnog.net
>> > http://lists.ausnog.net/mailman/listinfo/ausnog
>> 
>> _______________________________________________
>> AusNOG mailing list
>> AusNOG at lists.ausnog.net
>> http://lists.ausnog.net/mailman/listinfo/ausnog
>> _______________________________________________
>> AusNOG mailing list
>> AusNOG at lists.ausnog.net
>> http://lists.ausnog.net/mailman/listinfo/ausnog
>> _______________________________________________
>> AusNOG mailing list
>> AusNOG at lists.ausnog.net
>> http://lists.ausnog.net/mailman/listinfo/ausnog
>_______________________________________________
>AusNOG mailing list
>AusNOG at lists.ausnog.net
>http://lists.ausnog.net/mailman/listinfo/ausnog

-- 
Sent from my Android device with Pigeon.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140129/edddb153/attachment-0001.html>