Hi All,
Just to add to what Srini says, there's no magic to gettig high speeds
through routers/switches in the ATM world. The "router" part will need to
assemble the cells of a new session to see where the packets need to be
routed. It will also need to check the packets against any filters that
you've setup. If the session passes the filters, the "router" can tell the
"switch" part how to modify the future packets (while still in the cell
stream) to change the MAC addresses, ttl, appropriate checksums, etc.
The 'BFR' name was derived from Doom (registered version) where you could,
at some point, get the BFG. Perhaps someone from Id Software could jump
in here; everyone assumed that the B stood for Big, and that the G stood
for Gun, but I never heard that everyone reached total concensus about the F.
Later,
Chris Lonvick
Cisco Systems
Consulting Engineering
Houston, TX, USA
+1.713.778.5663
At 05:11 PM 4/8/97 -0400, Srini Seetharam wrote:
>Deric Giles <d .
r .
giles @
hud .
ac .
uk> wirtes :
>
>>connection. However in the near future our site is likely to be
>>connected to a MAN running at maybe 155Mb/sec and our internal network
>>upgraded to ATM at a similar speed. Having two routers in the path
>>acting at layer 3 now seem to pose a bottleneck. How can I maintain the
>>benefits from the speed upgrades without compromising security? The
>>only (partial) solution I can see is to merge the two routers but this
>
>Various networking companies are developing next generation router technology
>that in many instances is geared towards ATM. These routers will perform at
>wire speeds around 600Mbps and maybe even beyond. It is sometimes refered to
>as the BFR (Big Fast/F...ing/Fat Router). IPsilon already has a solution that
>works atleast with 155mbps ATM, maybe higher. Others may have solution today
>as well.
>
>We, at IgT, design chips and software for ATM networks. We are pursuing this
>goal of have a solution to this problem with the bulk of the routing and "FLow
>detection" at wire speeds being done in a single chip.
>
>And to add a point that is interetsing to the firewall community, just about
>all the schemes of flow detection have inherent packet filtering capabilities
>built in to them. In addition, the software that goes along with these devices
>can be used to be a basis for firewalling software running with these fast
>router accelerators.
>
>srini
>--
>------------------------------------------------------------------------
> IgT Srini W. Seetharam |
> ------------------------ Integrated Telecom Technology (IgT), |
> | __ __ | 18310 Montgomery Village Ave, Suite 300 |
> |__| |__ __| |____| Gaithersburg Maryland 20879 |
> | |__| | Tel: 301.990.9890 |
> | | Fax: 301.990.9893 |
> ------------------------ Web: http://www.igt.com/ |
> Net: srini @
igt .
com |
>------------------------------------------------------------------------|
>Expressed opinions may not be mine and not necessarily be those of IgT. |
>------------------------------------------------------------------------|
> Linux : The choice of the GNU Generation |
>------------------------------------------------------------------------
>
>
Follow-Ups:
|
|
