3 ms·
What I don't understand is why Cloudflare is making changes to their border routers in the process of protecting their customers. I am a network engineer and I
by tedchs 14y ago
What I don't understand is why Cloudflare is making changes to their border routers in the process of protecting their customers. I am a network engineer and I love Juniper, but the reality is with any complex system, every change you make has a possibility of inducing an unexpected failure. I would think Cloudflare would have increased stability by using an architecture where the border routers have a mostly static config, and there is a set of firewalls (e.g. Juniper SRX 5800) behind them that are doing the actual filtering and changing configs in response to threats.
- seanp2k2 14y agoSo now you have two pieces of gear to test changes on and another interaction where stuff could break / go weird. I don't see how that would solve anything here.
- tedchs 14y agoThe thing it would solve is risking all their BGP peerings going down as a result of day-to-day service operations (i.e. every time they add a filter).