4 ms·

But do they run FOSS software? And can they thus be trusted? Lots of network gear gets zero day'd and exploited. I can understand the sentiment of wanting to ru

But do they run FOSS software? And can they thus be trusted? Lots of network gear gets zero day'd and exploited. I can understand the sentiment of wanting to run something that can potentially be fixed and fixed quickly.

amluto 3y ago
Running FOSS software on a switch is an awkward endeavor. Some switches have okay-to-decent support, mostly via OpenWRT, and you’re mostly getting VLAN control. With Ruckus or Cisco, etc, you also get ACLs, some “layer 3” capabilities, sFlow, SNMP, real support for various loop detection schemes, network mapping capabilities, possible diagnosis of cable problems, and lots more. And a configuration system that is quite a bit better than you will find in most Linux networking config software. (Although OpenWRT actually tries pretty well, in contrast to, say, Ubuntu. Sigh.) I would not want to run a large network using OpenWRT switches. Maybe if OpenWRT took management of multiple devices seriously some day. FWIW, in theory you can run a mostly-open Linux stack on some of the very software-defined switches, supporting OpenFlow and such. See, for example, https://github.com/sonic-net/SONiC/wiki https://github.com/sonic-net/SONiC/wiki This did not seem like an easy thing to get working.
- davkan 3y ago
  I really wanted to get whitebox switches for my lab. There is very limited switch model support out there and almost none of the supported models are suitable for home use. No one needs a $6000 100gbe switch for their home lab. I need an 8 port 10gbe switch or a 48 port 1gbe poe switch and you will not find support for those types of switches from the white box operating systems. Whitebox switching is for datacenter and hyperscaler sdn. It’s not like building a whitebox nas or rolling your own bsd router. There’s really only two managed switch options for the homelab in my opinion. Mikrotik or, if you don’t mind loud noise and higher power consumption, used enterprise gear e.g. cisco. I’ve migrated all my network stuff to vyos routers on used sophos boxes, and mikrotik switches. The switches do nothing besides vlans and mc-lag. Vyos is great and supports everything I need like wan load balancing, vrrp, bgp ecmp, dhcp, dns forwarding.
  - amluto 3y ago
    FWIW, at least some of the small- and medium-size Ruckus switches are fanless or can be set to run in a mostly fanless mode. Doing the latter may limit the available PoE output. Also, eBay is coming up with plenty of reasonably priced Dell -ON switches and some very very cheap EdgeCore gear, but they might be old models and don’t appear on the Pica8 hardware compatibility list. Sigh.
    - davkan 3y ago
      I stand corrected, looks like you can get some of those dell switches for a couple hundred bucks, haven't looked at the market in a couple years. To me the biggest thing mikrotik offers that no one else seems to is small reasonably priced 10gbe switches. I don't need a 48 port sfp+ switch, I need two 12 port ones with mc-lag for my ceph/k8s cluster.
      - hammyhavoc 3y ago
        This has been one of the most rewarding comment threads on HN I've read in a long while. Lots of learning even for me in terms of what the current state of things is in terms of cost and choice.

amluto 3y ago

Running FOSS software on a switch is an awkward endeavor. Some switches have okay-to-decent support, mostly via OpenWRT, and you’re mostly getting VLAN control. With Ruckus or Cisco, etc, you also get ACLs, some “layer 3” capabilities, sFlow, SNMP, real support for various loop detection schemes, network mapping capabilities, possible diagnosis of cable problems, and lots more. And a configuration system that is quite a bit better than you will find in most Linux networking config software. (Although OpenWRT actually tries pretty well, in contrast to, say, Ubuntu. Sigh.) I would not want to run a large network using OpenWRT switches. Maybe if OpenWRT took management of multiple devices seriously some day. FWIW, in theory you can run a mostly-open Linux stack on some of the very software-defined switches, supporting OpenFlow and such. See, for example, https://github.com/sonic-net/SONiC/wiki https://github.com/sonic-net/SONiC/wiki This did not seem like an easy thing to get working.

davkan 3y ago
I really wanted to get whitebox switches for my lab. There is very limited switch model support out there and almost none of the supported models are suitable for home use. No one needs a $6000 100gbe switch for their home lab. I need an 8 port 10gbe switch or a 48 port 1gbe poe switch and you will not find support for those types of switches from the white box operating systems. Whitebox switching is for datacenter and hyperscaler sdn. It’s not like building a whitebox nas or rolling your own bsd router. There’s really only two managed switch options for the homelab in my opinion. Mikrotik or, if you don’t mind loud noise and higher power consumption, used enterprise gear e.g. cisco. I’ve migrated all my network stuff to vyos routers on used sophos boxes, and mikrotik switches. The switches do nothing besides vlans and mc-lag. Vyos is great and supports everything I need like wan load balancing, vrrp, bgp ecmp, dhcp, dns forwarding.
- amluto 3y ago
  FWIW, at least some of the small- and medium-size Ruckus switches are fanless or can be set to run in a mostly fanless mode. Doing the latter may limit the available PoE output. Also, eBay is coming up with plenty of reasonably priced Dell -ON switches and some very very cheap EdgeCore gear, but they might be old models and don’t appear on the Pica8 hardware compatibility list. Sigh.
  - davkan 3y ago
    I stand corrected, looks like you can get some of those dell switches for a couple hundred bucks, haven't looked at the market in a couple years. To me the biggest thing mikrotik offers that no one else seems to is small reasonably priced 10gbe switches. I don't need a 48 port sfp+ switch, I need two 12 port ones with mc-lag for my ceph/k8s cluster.
    - hammyhavoc 3y ago
      This has been one of the most rewarding comment threads on HN I've read in a long while. Lots of learning even for me in terms of what the current state of things is in terms of cost and choice.