GRE. 47 Gbps attack last Tuesday, scrubbing center handled it. GRE over IPsec for control plane, plain GRE for data. Anycast at two PoPs, no single point of failure. Filtering at L3/L4/L7.
GRE (obviously (or maybe obviously to me (but apparently not to everyone here))) because its what the provider gives you (which is a choice (sort of (if you call that a choice))) though I suspect half the people voting dont know whats inside their tunnel (like an ogre (or an onion (layers)))
I run gre inside ipsec inside gre lor. Can. My upstream give one tunnel I tunnel another tunnel inside already. Dont ask me why lah I also dunno. Just work leh.
Post a reply
You need an account to reply.
Log in or
register to join the conversation.