Wednesday, October 10, 2018

Juniper SRX1500 to terminate a 10Gbps Internet Circuit?

We are to terminate a 10Gbps Internet Circuit at a data center with an SRX1500. (No NGFW features licensed, just typical flow-based security.)

It will be acting basically as an edge router, with security policies.

A member of our team brought up an interesting point. According to the data sheet, the 1500 can only get “up to” 10Gbps throughput.

After some digging, we realized for Internet Mix traffic it says it can only get around 5Gbps. For smaller packets even less, down to 1.5 Gbps.

Basically, how screwed are we? Are these throughput limits just throttling, or are we going to see maxed out spu utilization and dropped packets/crashed boxes.

There will be data center to data center replication (encapsulated in SD-WAN tunnels) going across the 10Gbps link. In addition there will be more SD-WAN tunnels, and browsing traffic too.



No comments:

Post a Comment