net5501 network throughput

[Vincent Li]

Hi List,

I am thinking to get net5501 installed as transparent firewall for the
university department network I manage. We are on 100M public network
and I manage up to 120 computers on the 100M public network.

 Note that as educational public network, we have lot fo data flowing
in/out of our network, like downloading/uploading 10 - 100 gigabites
of of data to/from multiple computers the same time..., music, movies
streaming....

Would net5501 be able to handle this 100M public network enviroment?

Thanks.
_______________________________________________
Soekris-tech mailing list
Soekris-tech@...
http://lists.soekris.com/mailman/listinfo/soekris-tech

[Chris Babcock-3]

Vincent Li wrote:

> Hi List,
>
> I am thinking to get net5501 installed as transparent firewall for the
> university department network I manage. We are on 100M public network
> and I manage up to 120 computers on the 100M public network.
>
>  Note that as educational public network, we have lot fo data flowing
> in/out of our network, like downloading/uploading 10 - 100 gigabites
> of of data to/from multiple computers the same time..., music, movies
> streaming....
>
> Would net5501 be able to handle this 100M public network enviroment?
>

A 5501 can handle the full bandwidth of 100M links. However whether a
5501 can handle your environment depends on how complex a ruleset you
are planning on using for firewalling.

Do you know which OS/firewall package you would like to use? Also, what
do you have in place for a firewall right now?
_______________________________________________
Soekris-tech mailing list
Soekris-tech@...
http://lists.soekris.com/mailman/listinfo/soekris-tech

[Vincent Li]

> A 5501 can handle the full bandwidth of 100M links. However whether a
> 5501 can handle your environment depends on how complex a ruleset you
> are planning on using for firewalling.
>
> Do you know which OS/firewall package you would like to use? Also, what
> do you have in place for a firewall right now?

I am considering OpenBSD PF on it, I don't think I will have  complex
rules. It will be configured as transparent firewall to block some
ports access to my subnet.
_______________________________________________
Soekris-tech mailing list
Soekris-tech@...
http://lists.soekris.com/mailman/listinfo/soekris-tech

[Stuart Henderson]

On 2008-07-05, Chris Babcock <cbabcock@...> wrote:
> A 5501 can handle the full bandwidth of 100M links. However whether a
> 5501 can handle your environment depends on how complex a ruleset you
> are planning on using for firewalling.

Besides ruleset, it also depends a lot on how many packets per
second, and assuming a stateful firewall, how many of those have
to traverse the whole ruleset. 5501 is pretty tight for a link
you *expect* to run at 100Mb/s.


_______________________________________________
Soekris-tech mailing list
Soekris-tech@...
http://lists.soekris.com/mailman/listinfo/soekris-tech