Internet Edge and Defense in Depth

[mtinka at globaltransit.net (Mark Tinka)]

We've been fairly against centralizing functions, even 
though marketing scripts suggest it is worth doing.

Not security-related per se, but for smaller PoP's, we'll 
collapse P/PE functions into a single box. As others have 
mentioned, this makes sense when scale is small.

But on a large scale, we've not been one to buy into multi-
chassis-type arrangements. With boxes getting smaller and 
more powerful due to Ethernet being the implicitly agreed-
upon medium, it's still cheaper (and more resilient) to buy 
smaller boxes and distribute services than take one large 
one and stick them all in there.

I'm hoping the OP can draw a parallel for their own 
situation, if this is useful.

Cheers,

Mark.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part.
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20111207/71ea0109/attachment.bin>