Juniper 高校解决方案.ppt

* The fundamental architecture of the Juniper Networks routing systems is a complete separation between the routing- and packet-forwarding functions. This implementation consists of two independent components: a Routing Engine (RE) and a Packet Forwarding Engine (PFE). The RE is responsible for performing routing updates and system management. The RE consists of routing-protocol software processes running inside a protected memory environment on a Pentium-based computer platform. It has a direct 100-Mbps connection to the PFE. The RE maintains peer relationships, runs the routing protocols, builds the routing table and from that table, and creates the forwarding table that it exports to the PFE. The PFE is responsible for forwarding packets through the router. It is a high-performance, ASIC-based forwarding engine that is capable of forwarding 40 Mpps for all packet sizes under production conditions (for example, with 80,000 unique destinations). This separation ensures that high levels of route instability do not impact the performance of the Packet Forwarding Engine. Likewise, extremely large volumes of traffic do not impact the ability of the Routing Engine to maintain peer relationships and calculate routing tables. The clean separation of these two functions permits the delivery of both superior forwarding performance and a highly reliable system. * * * * * * NetScreen’s FW/VPN products are built on a unique technology platform. We use custom ASICs that gives us major performance and cost advantages, such as our 10x performance advantages in denial of service attack blocking and in VPN throughput. We also use a custom, real-time operating system software that gives us flexibility, security and additional performance advantages. Other security vendors run their security applications on general purpose operating systems that are slow and are riddled with vulnerabilities that are well known by hackers. Before installing security software on one of