[AusNOG] dark fibre encryption

[Alex Samad]

ta

On Wed, 8 Apr 2020 at 17:49, Phillip Grasso <phillip.grasso at gmail.com>
wrote:

> Cheapest is ipsec and there's plenty of options there. There's cheaper
> companies that do macsec support. Arista is the other option on major
> vendor options but there's a bunch of yumcha ones you can get if you don't
> mind some foreign government's having your keys :-p
>
> On Wed, 8 Apr 2020, 5:30 pm Alex Samad, <alex at samad.com.au> wrote:
>
>> Quick check of my network vendor , the equipment that has it is out of
>> price range :(
>>
>> A
>>
>> On Wed, 8 Apr 2020 at 15:43, Phillip Grasso <phillip.grasso at gmail.com>
>> wrote:
>>
>>> macsec is your best bet. Lots of vendors support it and is reasonably
>>> mature. better if you pick one that allows dual keys, no downtime with
>>> rotating keys or certs. Watch out bunch of platforms will HALVE or worse
>>> the performance of your gear by turning on macsec. e.g. cisco rosco
>>>
>>> On Tue, 7 Apr 2020 at 10:36, Alex Samad <alex at samad.com.au> wrote:
>>>
>>>> Hi
>>>>
>>>> I find myself in the situation that I need to look at purchasing some
>>>> DC to DC.  But I find I am not that well informed about whats available.
>>>> what people are doing as best practise.
>>>>
>>>> Quick google doesn't fill me with lots of options.
>>>>
>>>>
>>>> So packetlight is the current recommended vendor (their 2000 option).
>>>> Just looking to see whats to judge next to it
>>>>
>>>> Alex
>>>> _______________________________________________
>>>> AusNOG mailing list
>>>> AusNOG at lists.ausnog.net
>>>> http://lists.ausnog.net/mailman/listinfo/ausnog
>>>>
>>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20200408/f34e73b7/attachment.html>