Re: memory requirments for CBAC

From: Chuck Church (cchurch@optonline.net)
Date: Tue Nov 12 2002 - 22:05:10 GMT-3


H,

    I think 256 should be fine, even with say 2 sets of full BGP tables,
plus a whole ton of CBAC sessions. I believe the decision would come down
to how big your pipe to the internet is. If it's a couple T1s, the 3700s
would be fine. But a T3 (full or more than half) or two would probably
mandate a 7200. Depends on the budget in the end.

Chuck Church
CCIE #8776, MCNE, MCSE

----- Original Message -----
From: <tsiartas@ameritech.net>
To: "'Chuck Church'" <cchurch@optonline.net>; <ccielab@groupstudy.com>
Sent: Tuesday, November 12, 2002 7:50 PM
Subject: RE: memory requirments for CBAC

> Chuck
> Thanks for link I was looking for that!
>
> So if 256Mb pretty much the recommended to sun BGP, the 3xxx routers
> will soon be obsolete on being the border routers? Cause even the new
> 37xx is maxed out at 256Mb.right?
>
> Thanks
> h
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
> Chuck Church
> Sent: Tuesday, November 12, 2002 5:58 PM
> To: tsiartas@Ameritech.Net; ccielab@groupstudy.com
> Subject: Re: memory requirments for CBAC
>
> H,
>
> According to:
> http://www.cisco.com/en/US/products/sw/iosswrel/ps1828/products_configur
> atio
> n_guide_chapter09186a00800ca606.html#xtocid1689714
>
> you need at most 600 bytes per session. For a full internet table from
> 1
> AS, I think 128 mb is considered the minimum, although 96 might cut it.
> Depending on your peering and how many clients are being firewalled, you
> might want 192 - 256 mb total. I'm sure the ISP gurus on this list
> might
> have more input on exact BGP memory requirements though. Just don't
> undersize the router, as CBAC can get pretty processor intensive,
> especially
> in the path of a Code Red attack.
>
> Chuck Church
> CCIE #8776, MCNE, MCSE
>
>
> ----- Original Message -----
> From: <tsiartas@ameritech.net>
> To: <ccielab@groupstudy.com>
> Sent: Tuesday, November 12, 2002 6:03 PM
> Subject: memory requirments for CBAC
>
>
> > Does anybody know the memory requirements for a CBAC router?
> > I think you have to calculate certain bytes per statfull session.
> > Was wondering what would it be the recommended memory for a border
> > router
> > With CBAC and how much should we add on it for an internet BGP table.
> >
> > Thanks
> > h
> >
> > -----Original Message-----
> > From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf
> Of
> > Joe A
> > Sent: Tuesday, November 12, 2002 4:08 PM
> > To: 'Peng Zheng'; 'MADMAN'
> > Cc: ccielab@groupstudy.com
> > Subject: RE: upgrade 2501 pro
> >
> > This second router has 2M dedicated I/O memory, whereas the previous
> one
> > doesn't, and therefore uses DRAM for that purpose. Again, that's just
> a
> > change to the architecture, that's all.
> >
> > Joe
> >
> > -----Original Message-----
> > From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf
> Of
> > Peng Zheng
> > Sent: Tuesday, November 12, 2002 4:19 PM
> > To: MADMAN
> > Cc: ccielab@groupstudy.com
> > Subject: Re: upgrade 2501 pro
> >
> >
> > But on other 2501 router, I got:
> > cisco 2500 (68030) processor (revision D) with
> > 16384K/2048K bytes of memory.
> >
> > --- MADMAN <dave@interprise.com> wrote:
> > > It's right under your nose;) 14336 + 2948 = 16M
> > >
> > > 2M is dedicated to I/O
> > >
> > > Dave
> > >
> > > Peng Zheng wrote:
> > > >
> > > > I upgraded my CPA 2501 pro to 2501, and upgraded
> > > both
> > > > flash and mem. I installed 16M mem, but it
> > > displayed:
> > > >
> > > > cisco 2500 (68030) processor (revision L) with
> > > > 14336K/2048K bytes of memory.
> > > >
> > > > where is other 2M?
> > > >
> > > > How can I make it 16M?
> > > >
> > > > Thanks you for help.
> > > >
> > > > __________________________________________________
> > > > Do you Yahoo!?
> > > > U2 on LAUNCH - Exclusive greatest hits videos
> > > > http://launch.yahoo.com/u2
> > >
> > > --
> > > David Madland
> > > CCIE# 2016
> > > Sr. Network Engineer
> > > Qwest Communications
> > > 612-664-3367
> > >
> > > "You don't make the poor richer by making the rich
> > > poorer." --Winston
> > > Churchill
> >
> >
> > __________________________________________________
> > Do you Yahoo!?
> > U2 on LAUNCH - Exclusive greatest hits videos
> http://launch.yahoo.com/u2



This archive was generated by hypermail 2.1.4 : Tue Dec 03 2002 - 07:22:58 GMT-3