NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] Gigabit firewalling



Take a look at Rapidstream. www.rapidstream.com

Asic based running NG at 2GIG firewalling and 1GIG VPN 3DES throughput.

-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[email protected]]On Behalf Of
Hoeneveld, Maurice
Sent: April 15, 2002 7:03 AM
To: [email protected]
Subject: Re: [FW-1] Gigabit firewalling


Hello Phil

We experience the same 'problem' here at the moment.

As far as I can say now there are not many platforms that support the 1Gb
throughput. Except from the throughput itself there is another issue that
effects the performance dramaticly, the number of sessions. For each
session the firewall has to keep a sessioncounter which can affect the
performance in large multiuser sites.
A simple rule is that you need at least 1 MHz processor capacity for each
Mb throughput per interface. So a simple configuration of a firewall with
two 1Gb interfaces will need a 2GHz processor machine.
Although Checkpoint has a licence for multiprocessor machines the kernel
itself seems to use only one processor so it has to be a single processor
2Ghz machine in your case.
You can use a Linux platform for it or otherwise Sun has a possibility to
build a cluster of Sparc machines to get this performance. The last option
costs more but is more stable as I noticed in some test environments.

Greetings
Maurice Hoeneveld

At 11:31 AM 15-04-2002 +0100, you wrote:
>Hi Gurus,
>
>Has anyone had any experience of firewalling at Gigabit speeds using
>Firewall-1.
>I need performance of at least 400Mb/s and possibly in excess of 1Gb/s.
>
>I know the Nokia IP 740 will do the job... at a price...
>Does anyone know which Solaris/Linux boxes will achieve the same result, at
>lower costs.
>
>Thanks for your help.
>
>Phil Gaskell
>Co-ordinator Network Technologies.
>
>=================================================
>To set vacation, Out Of Office, or away messages,
>send an email to [email protected]
>in the BODY of the email add:
>set fw-1-mailinglist nomail
>=================================================
>To unsubscribe from this mailing list,
>please see the instructions at
>http://www.checkpoint.com/services/mailing.html
>=================================================
>If you have any questions on how to change your
>subscription options, email
>[email protected]
>=================================================

Maurice Hoeneveld
[email protected]
Security and Network Policy Managment

All mail concerning security issues can be send to:
[email protected]
[email protected]
[email protected]

Hogeschool voor Economische Studies
Kralingse Zoom 91
Postbus 4030
3006 AA Rotterdam
The Netherlands

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.