Re: Firewalling High Speed Interfaces (ATM -> GigE)

[Mark Bishop <mark@bish.net>]

Have you even considered using something other then Linux?  If I had to 
firewall something at that speed I'd used something from Cisco.  Their 
processors are designed to do stuff like this and can do it much faster 
then x86.  You would also get a lot more features using their OS then you 
would using a Linux kernel.

On Tue, 15 Jan 2002, Richard Fifarek wrote:

> 	The folks that I work for want to place a firewall between us and
> the "outside world" to help minimize our exposure.  We have an ATM OC-3
> (155 Mb/s) link currently, and eventually that will be expanded to GigE.  
> My question is with a fairly vanilla firewall set (allow Ssh, HTTP/HTTPS, 
> SMTP, FTP; disallow everything else), what kind of horse power will this 
> require?  What kind of lag can I expect?  At OC-3 speeds, I'm guessing 
> that most machines could handle the load, however when it jumps up to 
> GigE, I expect problems.  With 2.4 supporting threaded IP stack, SMP makes 
> sense 2-4 processors.  Would Xeon's extra cache make a difference?
> 
> 	     -----------------------------------------------------
> 	     Richard H. Fifarek	       		rfifarek@silug.org
>              -----------------------------------------------------
> 
> 
> 
> 
> -
> To unsubscribe, send email to majordomo@silug.org with
> "unsubscribe silug-discuss" in the body.
> 


-
To unsubscribe, send email to majordomo@silug.org with
"unsubscribe silug-discuss" in the body.