[AusNOG] dark fibre encryption
phillip.grasso at gmail.com
Wed Apr 8 17:49:01 EST 2020
Cheapest is ipsec and there's plenty of options there. There's cheaper
companies that do macsec support. Arista is the other option on major
vendor options but there's a bunch of yumcha ones you can get if you don't
mind some foreign government's having your keys :-p
On Wed, 8 Apr 2020, 5:30 pm Alex Samad, <alex at samad.com.au> wrote:
> Quick check of my network vendor , the equipment that has it is out of
> price range :(
> On Wed, 8 Apr 2020 at 15:43, Phillip Grasso <phillip.grasso at gmail.com>
>> macsec is your best bet. Lots of vendors support it and is reasonably
>> mature. better if you pick one that allows dual keys, no downtime with
>> rotating keys or certs. Watch out bunch of platforms will HALVE or worse
>> the performance of your gear by turning on macsec. e.g. cisco rosco
>> On Tue, 7 Apr 2020 at 10:36, Alex Samad <alex at samad.com.au> wrote:
>>> I find myself in the situation that I need to look at purchasing some DC
>>> to DC. But I find I am not that well informed about whats available. what
>>> people are doing as best practise.
>>> Quick google doesn't fill me with lots of options.
>>> So packetlight is the current recommended vendor (their 2000 option).
>>> Just looking to see whats to judge next to it
>>> AusNOG mailing list
>>> AusNOG at lists.ausnog.net
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the AusNOG