[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] Gigabit firewalling
Take a look at Rapidstream. www.rapidstream.com Asic based running NG at 2GIG firewalling and 1GIG VPN 3DES throughput. -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[email protected]]On Behalf Of Hoeneveld, Maurice Sent: April 15, 2002 7:03 AM To: [email protected] Subject: Re: [FW-1] Gigabit firewalling Hello Phil We experience the same 'problem' here at the moment. As far as I can say now there are not many platforms that support the 1Gb throughput. Except from the throughput itself there is another issue that effects the performance dramaticly, the number of sessions. For each session the firewall has to keep a sessioncounter which can affect the performance in large multiuser sites. A simple rule is that you need at least 1 MHz processor capacity for each Mb throughput per interface. So a simple configuration of a firewall with two 1Gb interfaces will need a 2GHz processor machine. Although Checkpoint has a licence for multiprocessor machines the kernel itself seems to use only one processor so it has to be a single processor 2Ghz machine in your case. You can use a Linux platform for it or otherwise Sun has a possibility to build a cluster of Sparc machines to get this performance. The last option costs more but is more stable as I noticed in some test environments. Greetings Maurice Hoeneveld At 11:31 AM 15-04-2002 +0100, you wrote: >Hi Gurus, > >Has anyone had any experience of firewalling at Gigabit speeds using >Firewall-1. >I need performance of at least 400Mb/s and possibly in excess of 1Gb/s. > >I know the Nokia IP 740 will do the job... at a price... >Does anyone know which Solaris/Linux boxes will achieve the same result, at >lower costs. > >Thanks for your help. > >Phil Gaskell >Co-ordinator Network Technologies. > >================================================= >To set vacation, Out Of Office, or away messages, >send an email to [email protected] >in the BODY of the email add: >set fw-1-mailinglist nomail >================================================= >To unsubscribe from this mailing list, >please see the instructions at >http://www.checkpoint.com/services/mailing.html >================================================= >If you have any questions on how to change your >subscription options, email >[email protected] >================================================= Maurice Hoeneveld [email protected] Security and Network Policy Managment All mail concerning security issues can be send to: [email protected] [email protected] [email protected] Hogeschool voor Economische Studies Kralingse Zoom 91 Postbus 4030 3006 AA Rotterdam The Netherlands ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|