[AusNOG] dark fibre encryption

[Phillip Grasso]

macsec is your best bet. Lots of vendors support it and is reasonably
mature. better if you pick one that allows dual keys, no downtime with
rotating keys or certs. Watch out bunch of platforms will HALVE or worse
the performance of your gear by turning on macsec. e.g. cisco rosco

On Tue, 7 Apr 2020 at 10:36, Alex Samad <alex at samad.com.au> wrote:

> Hi
>
> I find myself in the situation that I need to look at purchasing some DC
> to DC.  But I find I am not that well informed about whats available. what
> people are doing as best practise.
>
> Quick google doesn't fill me with lots of options.
>
>
> So packetlight is the current recommended vendor (their 2000 option).
> Just looking to see whats to judge next to it
>
> Alex
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20200408/5aa6599d/attachment.html>