Re: Appliance to install m0n0wall on

So monowall doesn't scale the state table based on the amount of memory the box has like pfsense?

Also, would gig on board be better than something pci based?


Message Sent from BlackBerry Device.

Nathaniel B. Lyon
Owner, NorthfieldWiFi
(612) 991-4260
www.northfieldwifi.com
[email protected]
 
The information in this e-mail is intended for the use of the individual or entity to which it is addressed, and may contain information that is privileged or confidential.  If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, use of, or reliance on, the contents of this e-mail is prohibited.  If you have received this e-mail in error, please notify us immediately by replying back to the sending e-mail address, and delete this e-mail message from your computer.

----- Original Message -----
From: Chris Buechler <[email protected]>
Cc: [email protected] <[email protected]>
Sent: Sat Jul 17 21:07:23 2010
Subject: Re: [m0n0wall] Appliance to install m0n0wall on

On Sat, Jul 17, 2010 at 9:50 PM, Nathaniel B. Lyon
<[email protected]> wrote:
> Hello,
>
> We are looking for an appliance to install m0n0wall onto.  We are aware that there are current appliances that can be purchased, but were kind of wanting something more under the hood in terms of CPU speed and memory.
>
> Right now with our current firewall we are averaging roughly 400Mbps, peaking at just under 600Mbps.  We feel our current firewall is nearing its  > end of life.  Any hardware recommendations?  We'd like to stay away from server based/PC based options so we can achieve wire speed.

You have that backwards - you'll need server class hardware to get
gigabit wire speed. There are some appliances that can achieve gigabit
wire speed or close to it, ones that basically put a server class
board inside of an appliance type chassis, such as Nexcom. An average
HP/Dell/whatever server is no different and quite a bit cheaper.
"Appliance" is nothing more than a form factor really, it's all x86
hardware.

Also you'll almost certainly need a custom built m0n0wall image,
ipfilter's state table size is hard coded at compile time, default is
30000. At that kind of throughput you're likely over 100,000 states.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]