IPng Networks
ipng.ch · Personal blog · on HN since 2021
IPng Networks is a small Swiss ISP whose operator writes detailed articles on routers, switches, VPP, Linux networking and IPv6.
What HN saysHN commenters call it useful write-ups, citing the Mellanox SN2700 switchdev guide and an APU6 benchmark where OpenBSD beat Linux and DPDK did far better.
18HN people shared it
11linked it in comments
14stories submitted
137story points
1 year agolast shared
2021people per year2026
Most-shared posts
- 1PCEngines with SFP6 people · 13 points · first shared 2021 · discussion on HN
- 2Debian on Mellanox SN2700 (32x100G)5 people · 1 points · first shared 2023 · discussion on HN
- 3VPP on FreeBSD1 people · 93 points · first shared 2024 · 7 comments on HN
- 4IPng Networks – Certificate Transparency – Part 11 people · 7 points · first shared 2025 · discussion on HN
- 5Case Study: IPng's mail servers1 people · 5 points · first shared 2024 · 2 comments on HN
- 6Case Study: NAT641 people · 5 points · first shared 2025 · discussion on HN
- 7Debian and switchdev on Mellanox SN2700 (32x100G)1 people · 3 points · first shared 2024 · discussion on HN
- 8VPP with Babel (Part 1)1 people · 3 points · first shared 2024 · discussion on HN
- 9Review: Netgate 61001 people · 3 points · first shared 2021 · discussion on HN
- 10IPng Acquires AS82981 people · 2 points · first shared 2021 · discussion on HN
- 11Review: S5648X-2Q4Z Switch – Part 2: MPLS1 people · 1 points · first shared 2022 · discussion on HN
- 12VPP on FreeBSD1 people · 1 points · first shared 2024 · discussion on HN
- 13Articles1 people · first shared 2024
- 14Lego dns011 people · first shared 2023
- 15Vpp 11 people · first shared 2022
What HN people wrote when they linked it
zxexz · 2024-07-14
Prefixing this here with - this is just my experience, I’m sure everyone who’s gone down this rabbit hole has had a different experience.
I usually trawl Ebay for a little bit every day when I’m looking for something specific, and start making offers when I figure out exactly what I want. Negotiating with the seller, asking questions about things that are for “parts only”. I have built up a small but very useful set of contacts that liquidate a lot of large/medium tech co’s surplus through this, so shoot me a message (see profile) if you have some specific hardware in mind.
If you’re doing 100G ethernet, my advice, biased by personal experience, is to buy “old” Mellanox gear from before the Nvidia acquisition, but went through the phase of still being supported by Nvidia. With NICs I’d avoid Connect-X 4, mostly due to their age, but 5 and 6 are great. There are so many models though so make sure you pick one that meets your needs, pay attention to the form factor especially - FHHL, HHHL, OCP 3, etc. Vendor OEM parts can often be cheaper - there’s a glut of HPE cables/transceivers, cards and switches out there, that are just Mellanox gear out there, or Supermicro AIOM cards that are fully OCP compliant. I’ve not had any issue mixing and matching this stuff.
For instance, I have a Gigabyte server with a couple Bergamo CPUs plugged into an HPE SN2700 switch with FS cables, Juniper transceivers, a Supermicro CX-6 OCP 100G card, and a non-OEM CX-6 dual port Infiniband CX-6…
eqvinox · 2024-07-31
DSA and OpenWRT are the wrong targets for this device class. switchdev & plain Linux is "it". This is how it needs to turn out: https://ipng.ch/s/articles/2023/11/11/mellanox-sn2700.html
p1esk · 2024-04-24
The author mentioned another similar write up which provided more useful explanations and context to me:
https://ipng.ch/s/articles/2023/11/11/mellanox-sn2700.html
karma_pharmer · 2024-04-24
All the switches in this series except the one in this review actually have two separate boards inside with a PCIe-over-cable connection between them. For example the SN2700 here (the sleeved cable in the third photo; you can't see the connector from the angle it's taken from):
https://ipng.ch/s/articles/2023/11/11/mellanox-sn2700.html
The cable has a SAS (SFF-8087) connector on each end. I bet you can replace it with an SFF-8087-to-Oculink cable:
https://www.amazon.com/chenyang-SFF-8611-SFF-8087-PCI-Express-Slimline…
and a PCIe-to-oculink card like one of these:
https://www.amazon.com/Ableconn-PEX-OL153-OCuLink-SFF-8612-Adapter/dp/…
(none of the links are affiliate links)
binkHN · 2024-04-06
> https://ipng.ch/s/articles/2021/07/19/pcengines-apu6.html
Nice little write-up. I found it interesting that OpenBSD outperformed Linux, but DPDK-based systems blew the roof off.
tranxen · 2024-04-05
There was this interesting talk [1] about how this ISP uses OpenBSD as BGP control plane.
I used to heard that OpenBSD was often used as Internet facing middlebox (like firewalls/proxy/network load balancer) because of how good pf and relayd are.
But it would surprise me if it would still be the case nowadays, OpenBSD seems to perform poorly [2] in terms of network throughput compared to the competition (VyOS/VPP). And I don't think this 7.5 upgrade helped a lot regarding this topic.
[1]: https://gregsowell.com/?p=7069 [2]: https://ipng.ch/s/articles/2021/07/19/pcengines-apu6.html
bauruine · 2024-01-10
If you want to go down the rabbit hole have a look at VPP. [0] It's a very fast, like 100GBit/s+ and 100 Mpps+, user space routing engine for commodity x86 hardware. Pim van Pelt has many interesting Videos [1] and articles [2] about it. I only tested it briefly before abandoning it because I'm still stuck on measly ~300/120 g.fast for the foreseeable future so I don't need it yet but especially the Linux CP [3] makes it reasonably workable if you have some Linux networking knowledge.
[0]: https://fd.io/
[1]: https://video.ipng.ch/search?search=vpp&searchTarget=local
[2]: https://ipng.ch/s/articles/
[3]: https://github.com/pimvanpelt/lcpng
wejn · 2023-09-16
A friend of mine runs dns01 thusly: https://ipng.ch/s/articles/2023/03/24/lego-dns01.html
transpute · 2023-04-20
Contact info on SFP review: https://ipng.ch/s/articles/2021/07/19/pcengines-apu6.html
walterbell · 2022-06-24
The latest version (APU6) has an SFP port, https://ipng.ch/s/articles/2021/07/19/pcengines-apu6.html
M.2 NVME mod, https://github.com/florolf/apu-m2
ay · 2022-11-05
The funding - I believe organizationally it has now grown into https://lfnetworking.org/about/members/ and fd.io is just one of the projects.
Contributions-wise to VPP: varies from time to time. On my very recent memory there were sizable IPSec acceleration patches from folks at Intel. There is a fair few one off bugfixes coming from smaller users who scratch their own itch. Pim van Pelt [0] has contributed/improved a few very cool and sizable features (Linux control plane integration, VPP yaml configurator [1])
As for difference with DPDK - does it do L3 routing? NAT ? MAP ? MPLS ? DHCP ? VPP can do all of this, and of course it’s just off top of my memory…
https://docs.fd.io/vpp/22.10/aboutvpp/featurelist.html is the autogenerated feature list based on the “claimed official features” that are tracked via YAML files in the source code.
[0] https://ipng.ch/s/articles/2021/08/12/vpp-1.html
[1] https://lists.fd.io/g/vpp-dev/topic/feedback_on_a_tool_vppcfg/90202690…