The MPLS WG Archive

Cell Relay Retreat>MPLS WG Archive>month:2000-Oct> msg00516



[Date Prev][Date Next][Thread Prev][Thread Next]  
  [Date Index][Thread Index][Author Index][Subject Index]

FW: VPN solution - White flag ?

  • From: "Hamid Ould-Brahim" <hbrahim@nortelnetworks.com>
  • Date: Thu, 26 Oct 2000 11:16:50 -0400
  • CC: "mpls@UU. net" <mpls@UU.NET>, nbvpn@bbo.com
  • Organization: Nortel Networks

Paul,

Your scalability question is really related to PE's resources (e.g., CPU,
memory)
On this respect building vpns with virtual routers is
no different than any other application

VPN/PE scalability depends also on factors like the software/hardware
architecture of the PE and  whether the "virtualization" aspect of VR is
built in within the PE infrastructure day one.

However no matter how powerful is the PE, there is always a limit
on what you can do on it.

Regards
Hamid


Paul Tasillo wrote:

> Will the overhead of running Virtual Routers impact the scalablity of the
> draft-ouldbrahim-vpn-vr-01 approach? That is, there must be a limit to the
> number of VRs a PE can handle and thus a limit to the number of VPNs the PE
> can handle. Is this true?
>
> -Paul (not Paul Doolan)
> Paul Tasillo
> Tivoli Systems
>
> -----Original Message-----
> From: owner-mpls@UU.NET [mailto:owner-mpls@UU.NET]On Behalf Of Jim
> Guichard
> Sent: Thursday, October 26, 2000 8:43 AM
> To: Barry Hass; erosen@cisco.com; Paul Doolan
> Cc: yakov@cisco.com; rnewcomb@ennovatenetowrks.com.tivoli.com;
> mpls@UU.NET; diego@estos.upc.es
> Subject: RE: VPN solution - White flag ?
>
> Barry,
>
> the answer is no. There are various ways to design Internet connectivity
> within this environment, one of which is to carry full Internet routes on
> the PE router. Other options include default routing from VPN sites to a
> central site that has Internet connectivity, another is to offload the
> Internet routes from the PE and run direct eBGP sessions from the VPN site
> to the Internet exit point. Which option is actually taken will depend on
> the specific design requirements. Jim
>
> At 08:37 26/10/2000 -0400, Barry Hass wrote:
> >Eric,
> >
> >Doesn't a PE router have to handle the full Internet routing
> >table, plus VRFs for whatever VPNs it is supporting? I think
> >that what some folks are suggesting is that BGP (not "the box",
> >but BGP specifically) is already bumping up against scaling
> >limits at 100,000 or so routes, and that burdening it with the
> >additional responsibility of managing VPNs is not such a great
> >idea. ("Some folks" please correct me if I'm wrong). Can you
> >comment on that?
> >
> >By the way, I don't have enough information to have an opinion
> >on this. I'm just trying to steer the discussion back to what
> >I thought was an interesting technical question before the
> >insults started to fly.
> >
> >> In the  NBVPN routing environment, it is  not true that
> >> anyone  in the world
> >> needs to be  able to reach anyone else  in the world.  Each
> >> VPN  has its own
> >> inter-connectivity  matrix,  much  smaller  than the
> >> Internet  connectivity
> >> matrix.  Now if you add up all the VPN routes, summed over
> >> all VPNs, you may
> >> indeed get  a much larger  number than the  number of
> >> Internet  routes.  But
> >> there is no one box which needs  to hold them all.  Since an
> >> instance of BGP
> >> runs in a particular box, and only  has to deal with the
> >> routes that need to
> >> be in that box,  you don't run up against the same  box
> >> scaling problems you
> >> run up  against in  the Internet routing  environment.  You
> >> can  design your
> >> system to  have a given box  handle as many routes  or as few
> >>  routes as you
> >> want.
> >
>
> Jim Guichard CCIE #2069
> Network Design Consultant EMEA
> Global Solutions Engineering
>
> +44 208 756 8806
> Mobile: +44 7802 809763