Re: [pfSense-discussion] Can pfSense be ported to Intel IXP425?

2007-02-28 Thread Jim Thompson


Further to the discussion early this month, and in specific reference  
to: http://www.mail-archive.com/discussion@pfsense.com/msg02110.html  
and noting the fact that the end of February is upon us.


Work proceeds. Some of you may have noticed that the ixp42x support  
recently got MFC-ed to 6.2, nearly simultaneously we got the ability  
to boot the kernel out of the on-board
flash chip (not the CF socket).  pfSense has enough footprint that  
the CF socket is necessary, but the board does run FreeBSD 6.2 quite  
nicely now.


The current efforts have been in making the requisite parts of the  
'ports' collection either cross-compile (its ugly) or compile on a  
native target (a real Gateworks board) with disk via NFS.   While 6.2  
runs fine on both the 64MB and 128MB variants of the Gateworks board,  
compiling things such as Perl or Ruby (requisite for many ports) can  
consume as much as 160MB of combined ram+swap.


And compiling on an ixp42x isn't as fast as you're likely used to if  
you use an Intel x86-like computer purchased in the last 6-7 years.


In any case, the webserver is up and serving PHP pages as of early  
today (er, Tuesday), so a beta release of something very-much  
pfSense-like (I hesitate to call
it 'pfSense' until Scott, Bill and Chris sign-off) should be out  
quite soon.


Jim



RE: [pfSense-discussion] Can pfSense be ported to Intel IXP425?

2007-02-28 Thread Richard Davis
Thanks for the effort on this.  I'm not much of a tester but my company 
does have some Gateworks boards that I can use. 
I can help test if you tell me what you want done.

Richard Davis
www.bizsyscon.com

-Original Message-
From: Jim Thompson [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, February 28, 2007 8:04 AM
To: discussion@pfsense.com
Subject: Re: [pfSense-discussion] Can pfSense be ported to Intel IXP425?



Further to the discussion early this month, and in specific reference  
to: http://www.mail-archive.com/discussion@pfsense.com/msg02110.html  
and noting the fact that the end of February is upon us.

Work proceeds. Some of you may have noticed that the ixp42x support  
recently got MFC-ed to 6.2, nearly simultaneously we got the ability  
to boot the kernel out of the on-board
flash chip (not the CF socket).  pfSense has enough footprint that  
the CF socket is necessary, but the board does run FreeBSD 6.2 quite  
nicely now.

The current efforts have been in making the requisite parts of the  
'ports' collection either cross-compile (its ugly) or compile on a  
native target (a real Gateworks board) with disk via NFS.   While 6.2  
runs fine on both the 64MB and 128MB variants of the Gateworks board,  
compiling things such as Perl or Ruby (requisite for many ports) can  
consume as much as 160MB of combined ram+swap.

And compiling on an ixp42x isn't as fast as you're likely used to if  
you use an Intel x86-like computer purchased in the last 6-7 years.

In any case, the webserver is up and serving PHP pages as of early  
today (er, Tuesday), so a beta release of something very-much  
pfSense-like (I hesitate to call
it 'pfSense' until Scott, Bill and Chris sign-off) should be out  
quite soon.

Jim



Re: [pfSense-discussion] Can pfSense be ported to Intel IXP425?

2007-02-03 Thread Daniel S. Haischt

Hi!

Jim Thompson schrieb:


Post getting pfSense running on the Gateworks board, I'm working on a 
storage appliance (that currently runs linux) with an Intel Xscale 
80219.  The idea
is to take the ZFS work already limping in -current and make it work 
with a re-worked freenas (based on m0n0wall) distribution.




FreeNAS is already available as a package for pfSense-current.

Instead of using ZFS, I am working towards adding GFarm support
so Samba et al can be run on top of a cluster, fault tolerant
file system.

Recently I did various inquiries regarding sample ARM based boards,
but till today none of the hardware vendors was willing to donate
one of their boards or appliances.

--

Mit freundlichen Gruessen / With kind regards

DAn.I.El S. Haischt | phone:+49 -7032-992909
Grabenstrasse 11|   +49 -700-DHAISCHT
| fax:  +49 -7032-992910
D-71083 Herrenberg  | fax2mail: +49 -7032-7999738
GERMANY | cell: +49 -172-7668936

email: [EMAIL PROTECTED]
web:   http://www.daniel.stefan.haischt.name/


RE: [pfSense-discussion] Can pfSense be ported to Intel IXP425?

2007-02-02 Thread Holger Bauer
32MB RAM is by far not enough to run pfSense. You at least need 128 MB.
Also the CPU is not yet supported.

Holger 

-Original Message-
From: ryn jackson [mailto:[EMAIL PROTECTED] 
Sent: Saturday, February 03, 2007 12:31 AM
To: discussion@pfsense.com
Subject: [pfSense-discussion] Can pfSense be ported to Intel IXP425?

Having been running pfsense for a week now, i have to say i trule enjoy
it, and i have qos that works!
I had been using the Linksys RV082 in several of our offices and the
only thing i don't like about them is their flexibility and weak QoS.
The specs and performance on these boxes are pretty amazing for the
price:
Intel IXP425 533MHz
32 Meg RAM
16 Meg Flash
Dual Wan
8 LAN ports that can supposedly be separated into VLAN's (fake, they
still use the same subnet but traffic doesn't pass between them) Too bad
the existing firmware doesn't harness the power of the hardware. I've
clocked a consistent 27Mbps of 3DES IPsec with these.
These linksys boxes are running Linux 2.4 with openswan and iptables i
believe.

There is a Firmware project to update the Linksys RV seres to the 2.6
kernel and tweak some other stuff. One is called OpenWRV
http://www.phj.hu/wrv54g/ which seems to be focused on the wireless
version and the other one is OpenIXP which is tied to this project
focusing on the IXP platform. Neither of them seem to have gone
anywhere, maybe the members are too busy? I think pfSense would be much
better than modifying the crappy firmware that linksys provides anyways.

I am under the impression that Free BSD is not only lighter, but more
efficient with networking (network stack)  than Linux is so i was
wondering if it would be possible to port to this platform. there's more
info on its little brother here:
http://www.linksysinfo.org/forums/showthread.php?t=34276
That thread is about the RV042 [EMAIL PROTECTED], 32Meg ram but it's
interesting that these boxes have 2 serial ports, mini pci and even HDD
capability built in.
I cannot, for the life of me find this but there's a project going on
now to hack and rewrite the existing firmware but why start with crap if
you could port over something like pfSense, even it has some features
stripped out.

What do you guys think? Is it feasible/possible? I would really like to
have an appliance using this platform and pfSense. It's got way more
power than the Soekris/wrap the only thing i'm concerned about is the
32meg of ram, but i think it would be possible.

I think the best way to actually make the VLANs function on this device
(i don't think it would support 802.1q) would be to assign subnet
interfaces to vlans (up to 8) and then assign vlan's to lan ports. All
traffic on ports with the same vlan assigned is bridged. That's the way
routing assignments work on the Adtran Netvanta 1224R's i work with and
it's very intuitive.

=
Buy Your Aromatic Vaporizer For Less
All major brands in stock. Find Volcano, Vapir, VaporWarez, and Aromed
vaporizers at great prices. Same-day free shipping and cool freebies
with all orders. 75,000 positive feedbacks.
http://a8-asy.a8ww.net/a8-ads/adftrclick?redirectid=5a645f954582396c441f
2a7301d3ac8a




Re: [pfSense-discussion] Can pfSense be ported to Intel IXP425?

2007-02-02 Thread Bill Marquette

At this time we don't support the processor - I believe there's some
work in the FreeBSD camp to support the architecture.  Whether the
rest of the hardware in that unit would be supported would remain to
be seen.  32M RAM and 16M flash are both rather light for pfSense, we
barely run in 64M today and need a tad over 64M flash.  I'm sure it
would be possible to make a pfsense-lite type distribution that would
run on a box such as this, but it'd likely be better to start from
scratch and make use of the pfsense code as a reference for how stuff
works than to try and lean out the ram and disk requirements we have.

--Bill

On 2/2/07, ryn jackson [EMAIL PROTECTED] wrote:

Having been running pfsense for a week now, i have to say i trule enjoy it, and 
i have qos that works!
I had been using the Linksys RV082 in several of our offices and the only thing 
i don't like about them is their flexibility and weak QoS.
The specs and performance on these boxes are pretty amazing for the price:
Intel IXP425 533MHz
32 Meg RAM
16 Meg Flash
Dual Wan
8 LAN ports that can supposedly be separated into VLAN's (fake, they still use 
the same subnet but traffic doesn't pass between them)
Too bad the existing firmware doesn't harness the power of the hardware. I've 
clocked a consistent 27Mbps of 3DES IPsec with these.
These linksys boxes are running Linux 2.4 with openswan and iptables i believe.

There is a Firmware project to update the Linksys RV seres to the 2.6 kernel 
and tweak some other stuff. One is called OpenWRV http://www.phj.hu/wrv54g/ 
which seems to be focused on the wireless version and the other one is OpenIXP 
which is tied to this project focusing on the IXP platform. Neither of them 
seem to have gone anywhere, maybe the members are too busy? I think pfSense 
would be much better than modifying the crappy firmware that linksys provides 
anyways.

I am under the impression that Free BSD is not only lighter, but more efficient 
with networking (network stack)  than Linux is so i was wondering if it would 
be possible to port to this platform. there's more info on its little brother 
here: http://www.linksysinfo.org/forums/showthread.php?t=34276
That thread is about the RV042 [EMAIL PROTECTED], 32Meg ram but it's 
interesting that these boxes have 2 serial ports, mini pci and even HDD 
capability built in.
I cannot, for the life of me find this but there's a project going on now to 
hack and rewrite the existing firmware but why start with crap if you could 
port over something like pfSense, even it has some features stripped out.

What do you guys think? Is it feasible/possible? I would really like to have an 
appliance using this platform and pfSense. It's got way more power than the 
Soekris/wrap the only thing i'm concerned about is the 32meg of ram, but i 
think it would be possible.

I think the best way to actually make the VLANs function on this device (i 
don't think it would support 802.1q) would be to assign subnet interfaces to 
vlans (up to 8) and then assign vlan's to lan ports. All traffic on ports with 
the same vlan assigned is bridged. That's the way routing assignments work on 
the Adtran Netvanta 1224R's i work with and it's very intuitive.

=
Buy Your Aromatic Vaporizer For Less
All major brands in stock. Find Volcano, Vapir, VaporWarez, and Aromed 
vaporizers at great prices. Same-day free shipping and cool freebies with all 
orders. 75,000 positive feedbacks.
http://a8-asy.a8ww.net/a8-ads/adftrclick?redirectid=5a645f954582396c441f2a7301d3ac8a




Re: [pfSense-discussion] Can pfSense be ported to Intel IXP425?

2007-02-02 Thread Jim Thompson
Working on a 'port' of pfSense to the Gateworks ixp42x platform, as  
well as a 6 x 10/100 Enet + 2 x miniPCI box I have access to...


(I'm the guy who sold all the xscale developers (save Sam Leffler)  
gateworks boards at my cost.)


The Gateworks boards we carry have 64MB ram, 8MB flash and CF  
sockets. FreeBSD-current boots on this board, the project is  
backporting to 6.2, then cracking the pfSense development environment  
across the face hard enough to make it cross-compile.  The main issue  
with a pure (non-CF) flash
environment is that FreeBSD currently has no provisions for a FFS  
(such as jffs2) or the MTD layer found in linux.   This, combined  
with the need to
squeeze into 16MB (or even 8MB)  put support of a pure flash  
environment last on the list.


(The full 'make buildworld' binary output is 184MB, but this can be  
sliced quite a bit.)


Stay tuned, should have something this month.  Work has been slowed  
some recently by a customer who wants to put linux on their line of  
private jets.  (Sorry.)


Post getting pfSense running on the Gateworks board, I'm working on a  
storage appliance (that currently runs linux) with an Intel Xscale  
80219.  The idea
is to take the ZFS work already limping in -current and make it work  
with a re-worked freenas (based on m0n0wall) distribution.



Jim
p.s.  Chris, sorry if that was too commercial.

On Feb 2, 2007, at 1:31 PM, ryn jackson wrote:

Having been running pfsense for a week now, i have to say i trule  
enjoy it, and i have qos that works!
I had been using the Linksys RV082 in several of our offices and  
the only thing i don't like about them is their flexibility and  
weak QoS.
The specs and performance on these boxes are pretty amazing for the  
price:

Intel IXP425 533MHz
32 Meg RAM
16 Meg Flash
Dual Wan
8 LAN ports that can supposedly be separated into VLAN's (fake,  
they still use the same subnet but traffic doesn't pass between them)
Too bad the existing firmware doesn't harness the power of the  
hardware. I've clocked a consistent 27Mbps of 3DES IPsec with these.
These linksys boxes are running Linux 2.4 with openswan and  
iptables i believe.


There is a Firmware project to update the Linksys RV seres to the  
2.6 kernel and tweak some other stuff. One is called OpenWRV http:// 
www.phj.hu/wrv54g/ which seems to be focused on the wireless  
version and the other one is OpenIXP which is tied to this project  
focusing on the IXP platform. Neither of them seem to have gone  
anywhere, maybe the members are too busy? I think pfSense would be  
much better than modifying the crappy firmware that linksys  
provides anyways.


I am under the impression that Free BSD is not only lighter, but  
more efficient with networking (network stack)  than Linux is so i  
was wondering if it would be possible to port to this platform.  
there's more info on its little brother here: http:// 
www.linksysinfo.org/forums/showthread.php?t=34276
That thread is about the RV042 [EMAIL PROTECTED], 32Meg ram but it's  
interesting that these boxes have 2 serial ports, mini pci and even  
HDD capability built in.
I cannot, for the life of me find this but there's a project going  
on now to hack and rewrite the existing firmware but why start with  
crap if you could port over something like pfSense, even it has  
some features stripped out.


What do you guys think? Is it feasible/possible? I would really  
like to have an appliance using this platform and pfSense. It's got  
way more power than the Soekris/wrap the only thing i'm concerned  
about is the 32meg of ram, but i think it would be possible.


I think the best way to actually make the VLANs function on this  
device (i don't think it would support 802.1q) would be to assign  
subnet interfaces to vlans (up to 8) and then assign vlan's to lan  
ports. All traffic on ports with the same vlan assigned is bridged.  
That's the way routing assignments work on the Adtran Netvanta  
1224R's i work with and it's very intuitive.


=
Buy Your Aromatic Vaporizer For Less
All major brands in stock. Find Volcano, Vapir, VaporWarez, and  
Aromed vaporizers at great prices. Same-day free shipping and cool  
freebies with all orders. 75,000 positive feedbacks.
http://a8-asy.a8ww.net/a8-ads/adftrclick? 
redirectid=5a645f954582396c441f2a7301d3ac8a