Re: Freeradius info

[CTA]

On 25 Oct 2002, at 14:59, [EMAIL PROTECTED] wrote:

Subject: Freeradius info
From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
To: "freeradius-users" <[EMAIL PROTECTED]>
Send reply to: [EMAIL PROTECTED]
<mailto:[EMAIL PROTECTED]?subject=subscribe>
<mailto:[EMAIL PROTECTED]?subject=unsubscribe>
Date sent: Fri, 25 Oct 2002 14:59:14 +0200

> Hi everyone!
> I'm going to use Freeradius 0.71.
> I'd like to know :
>
> 1- which is the best OS and version between Linux and Unix that
> supports Freeradius 0.7.1
>
> 2- If to implement a database you can use the file system. If
> not which type of database I could use ?
>
>R>>
IMHO

FreeRadius Benchmark, mileage may vary...

System
Intel ISP2150, Pentium III � 750mhz, 256M Ram, 30Gig Hard Drive

Where:
1 = minimum, 10 = maximum
OS | Installation Difficulty | Query Performance | User Density | Security | Scalability
=============================================
BSDi | 4 | 7 | 7 | 7 | 7
//Best for Production, also get Source, but cost some $$$

FreeBSD | 5 | 7 | 7 | 6 | 7
// Better, scale very well but requires a good kernel tuning

OpenBSD | 6 | 6 | 6 | 6 | 6
// Good, but difficult to install a solid kernel, threading issues

Linux | 3 | 5 | 6 | 5 | 6
// Good for small networks and app testing, but security needs improvement

Net BSD | 5 | 5 | 5 | 5 | 6
//Ok for testing, but lacks Source support, kernel buggy

Win 2000 | 2 | 4 | 4 | 2 | 4 // Ok for small networks, install is easy, security and performance are not acceptable.

MAC | ? | ? | ? | ? | ? > DUT>>>//Still working on building working source tree.

Radius 101, don�t put a NAS radius box anywhere in a public network DMZ. Also, use local private Cashing DNS on the same private net for Dialin users and max performance and security. Don't let NAS do NAT, use a NAT Firewall box or router, or as we do, radius+NAT+FW bastion all working together. This is faster, more secure, keeps the noise out (CODERED etc), and conserves public IP space.

Lastly, for auth, Postgres runs 2 times faster than mySQL, and dies gracefully, but is more difficult to install stable. We like DBM / DB as it can be more secure and faster than SQL, but needs lots of code work for an effective front-end. For general accounting, Postgres is our pref. Forget MSSQL/Access, etc.

Hope this helps...

bernie
[EMAIL PROTECTED]



> Thanks very much.
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
>


>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> This email and any files transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. This communication may contain material protected by the attorney-client privilege. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. If you have receive this email in error, please immediately notify the sender by email. >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html