Routing

last person joined: 4 days ago 

Ask questions and share experiences about ACX Series, CTP Series, MX Series, PTX Series, SSR Series, JRR Series, and all things routing, including portfolios and protocols.
  • 1.  J2350 and policer and state-less firewall, latency affection

    Posted 11-06-2011 01:03

    Hi,

     

    Does J2350 have ASIC firewall implementation? How much stateless firewall and policying will it handle? Will it affect forward latency?

     

    Thanks.



  • 2.  RE: J2350 and policer and state-less firewall, latency affection

    Posted 11-06-2011 05:30

    The J-series do not use the asic based forwarding but software based to keep the cost down.  There is an option for Hardware based encryption that can improve performance for encrypted traffic.

     

    You can see the maximum throughput for the various types of traffic in the specification sheet.

    http://www.juniper.net/elqNow/elqRedir.htm?ref=http://www.juniper.net/us/en/local/pdf/datasheets/1000206-en.pdf

     

    Product home

     

    http://www.juniper.net/us/en/products-services/routing/j-series/j2350/



  • 3.  RE: J2350 and policer and state-less firewall, latency affection

    Posted 11-06-2011 11:01

     I know it don't have asic for forwarding, does that means it doesn't have it for filtering as well? 

     

    What's the latency effect on firewall rules?



  • 4.  RE: J2350 and policer and state-less firewall, latency affection
    Best Answer

    Posted 11-07-2011 04:05

    The only hardware based processing availabe in the J-series is the optional encryption.  All other processing occurs in software.

     

    I don't know if there is any latency effect on stateless firewalls.  I've never seen a change in applying one.  But I have only used small filters.  I suppose it is theoretically possible that a very large filter and high traffic would introduce some latency.

     

    But with the J-series you are more likely to hit throughput limits for the traffic types that would affect performance before this would.  Take a look at the max specs in the data sheet for they type of traffic you will be processing.