Web Hosting Talk : Web Hosting Main Forums : Colocation and Data Centers : M7i DDoS Protection

[Adrian-Voltage]

I was wondering if anyone could shed some light on the DDoS capability of 2x M7i, using 2x HP Procurve 2848

How much is this capable of handling, both have 4x 1Gig each.

[FastServ]

Umm... 4Gig DOS max? These days anything less than multiple 10GE shouldn't be used in the same sentence as DDOS capability.

[Adrian-Voltage]

Originally Posted by FastServ

Umm... 4Gig DOS max?

I said above, both have 4x 1gig upstreams.

[FastServ]

I take that back, 1G DOS max. Since >1G DOS could saturate any one of your 1G links.

[Adrian-Voltage]

Originally Posted by FastServ

I take that back, 1G DOS max. Since >1G DOS could saturate any one of your 1G links.

I'm simply asking, what are these routers capable of handling if let's say, each router has the full upstream connected, 2x 10Gig.

http://www.juniper.net/us/en/product.../m-series/m7i/

[JTY]

It'll do line rate, so if you've got 5 gig-e ports, it'll handle 5Gb/s. But in reality, you probably have 2x gig-e upstream and 2x gig-e downstream, so 2Gb/s. However, that is assuming the traffic is evenly distributed across your links.

[IRCCo Jeff]

There seems to be some confusion. The DDoS protection of a M7i is ZERO. Its advertised DDoS protection capabilities are to protect itself from a direct attack and have nothing to do with filtering.

Also, for the same price as a M7i with 4 x GE you can have a MX80 with 48 x GE. It sounds like you might be getting this grey market? If so, that's a really bad idea with Juniper. You'll have to pay more than the entire cost of the router just to get it back under the support contract if its expired upon purchase.

If you're buying new, both the M7i and the MX80 discussed will sell in the $30's.