Re: [pfSense] successor to ALIX is here

2014-04-05 Thread Thinker Rix
Hi Jim On 2014-04-05 20:32, Jim Thompson wrote: On Apr 5, 2014, at 8:53 AM, Thinker Rix > wrote: On 2014-04-05 07:00, Ryan Coleman wrote: And you cannot eliminate three of this with a switch? I don't know any method how a network switch could replace the N

Re: [pfSense] successor to ALIX is here

2014-04-05 Thread Adam Thompson
On 14-04-05 12:32 PM, Jim Thompson wrote: This SANS paper has a description of the common attacks against a VLAN segmentation architecture, as well as countermeasures to same. It includes code to demonstrate several of the attacks. https://www.sans.org/reading-room/whitepapers/networkdevs/virt

Re: [pfSense] successor to ALIX is here

2014-04-05 Thread Jim Thompson
On Apr 5, 2014, at 8:53 AM, Thinker Rix wrote: > On 2014-04-05 07:00, Ryan Coleman wrote: >> And you cannot eliminate three of this with a switch? > > I don't know any method how a network switch could replace the NICs of my > firewall - other than by operating with VLANs. > > But I do not tr

Re: [pfSense] successor to ALIX is here

2014-04-05 Thread Thinker Rix
On 2014-04-05 07:00, Ryan Coleman wrote: And you cannot eliminate three of this with a switch? I don't know any method how a network switch could replace the NICs of my firewall - other than by operating with VLANs. But I do not trust VLANs for this. This is not the correct purpose of VLANS

Re: [pfSense] successor to ALIX is here

2014-04-04 Thread Ryan Coleman
And you cannot eliminate three of this with a switch? Sounds like you should look at your design. -- Ryan Coleman > On Apr 4, 2014, at 22:59, Thinker Rix wrote: > >> On 2014-04-02 23:24, Ryan Coleman wrote: >> Wouldn’t a layer-3 switch be a good investment in this situation? Put the >> load

Re: [pfSense] successor to ALIX is here

2014-04-04 Thread Thinker Rix
On 2014-04-02 23:24, Ryan Coleman wrote: Wouldn't a layer-3 switch be a good investment in this situation? Put the load on another device instead of, what is for all intents and (definitely) purpose a /thin, light-weight/ piece of hardware? A switch? Not really, since I would like to have the

Re: [pfSense] successor to ALIX is here

2014-04-03 Thread Richard Lussier
On 2014-04-02 10:59, Jim Pingle wrote: On 4/2/2014 10:35 AM, Eugen Leitl wrote: Apu.1c http://www.heise.de/newsticker/meldung/Embeddded-Mainboard-mit-x86-CPU-und-Coreboot-2160404.html We've been watching that one for a while. There have been some detailed discussions on the forum about it as

Re: [pfSense] successor to ALIX is here

2014-04-03 Thread Kendrick Vargas
Might be a little pricey, but I got Lanner to sell me a single unit. With the hard drive mounts, etc., it was about $384 shipped and it's been a champ. I got the 7539 just before they released the 7540. Basically the same unit, but with Ddr3 and a better cpu. http://www.lannerinc.com/products/x86-

Re: [pfSense] successor to ALIX is here

2014-04-03 Thread Nenhum_de_Nos
On Wed, April 2, 2014 11:35, Eugen Leitl wrote: > > Apu.1c > http://www.heise.de/newsticker/meldung/Embeddded-Mainboard-mit-x86-CPU-und-Coreboot-2160404.html > > http://www.pcengines.ch/apu1c.htm > > in stock, €105.13 a little off, but are those better as home fileserver then the soekris 6501 ?

Re: [pfSense] successor to ALIX is here

2014-04-03 Thread Jim Thompson
On Apr 3, 2014, at 3:35 PM, Dave Riesz wrote: > On Wed, Apr 2, 2014 at 3:44 PM, Jim Thompson wrote: > > > Yeah, we carried those for a while, then they started coming back, so we > carrying it in the store, and are moving the remaining inventory on Amazon. > I think we called it the FW-525B.

Re: [pfSense] successor to ALIX is here

2014-04-03 Thread Dave Riesz
On Wed, Apr 2, 2014 at 3:44 PM, Jim Thompson wrote: > > > Yeah, we carried those for a while, then they started coming back, so we > carrying it in the store, and are moving the remaining inventory on Amazon. > I think we called it the FW-525B. > > They (also) have RealTek NICs. > > YMMV. > > Jim

Re: [pfSense] successor to ALIX is here

2014-04-03 Thread Jim Thompson
On Apr 3, 2014, at 2:38 PM, Bob Gustafson wrote: > > On 04/02/2014 04:55 PM, Jim Thompson wrote: >> This would enable multiples of 10G performance for load-balancing, packet >> filtering, and even NAT (with the right switch hardware). > > Dreamer - from my Chicago franchised ISP - only on a g

Re: [pfSense] successor to ALIX is here

2014-04-03 Thread Bob Gustafson
On 04/02/2014 04:55 PM, Jim Thompson wrote: This would enable multiples of 10G performance for load-balancing, packet filtering, and even NAT (with the right switch hardware). Dreamer - from my Chicago franchised ISP - only on a good day do I get close to the 10Mb I am paying for.. Bob G __

Re: [pfSense] successor to ALIX is here

2014-04-02 Thread Jim Thompson
On Apr 2, 2014, at 5:01 PM, Chris Bagnall wrote: > On 2/4/14 9:17 pm, Thinker Rix wrote: >> Unfortunately again only 3 NICs... and Realteks with bad performance. >> I would love to see such a board one day with at least 4-8 NICs. > > On that subject, we've recently been experimenting with these

Re: [pfSense] successor to ALIX is here

2014-04-02 Thread Jeremy Porter
On 4/2/2014 5:01 PM, Chris Bagnall wrote: On 2/4/14 9:17 pm, Thinker Rix wrote: Unfortunately again only 3 NICs... and Realteks with bad performance. I would love to see such a board one day with at least 4-8 NICs. On that subject, we've recently been experimenting with these: http://linitx.co

Re: [pfSense] successor to ALIX is here

2014-04-02 Thread Chris Bagnall
On 2/4/14 9:17 pm, Thinker Rix wrote: Unfortunately again only 3 NICs... and Realteks with bad performance. I would love to see such a board one day with at least 4-8 NICs. On that subject, we've recently been experimenting with these: http://linitx.com/product/jetway-jbc373-intel-atom-d525-bar

Re: [pfSense] successor to ALIX is here

2014-04-02 Thread Jim Thompson
On Apr 2, 2014, at 3:24 PM, Ryan Coleman wrote: > Wouldn’t a layer-3 switch be a good investment in this situation? Put the > load on another device instead of, what is for all intents and (definitely) > purpose a thin, light-weight piece of hardware? It doesn’t even need to be a layer-3 swit

Re: [pfSense] successor to ALIX is here

2014-04-02 Thread Jim Thompson
On Apr 2, 2014, at 3:17 PM, Thinker Rix wrote: > On 2014-04-02 17:35, Eugen Leitl wrote: >> Apu.1c >> http://www.heise.de/newsticker/meldung/Embeddded-Mainboard-mit-x86-CPU-und-Coreboot-2160404.html >> >> http://www.pcengines.ch/apu1c.htm >> >> in stock, €105.13 > > Unfortunately again only

Re: [pfSense] successor to ALIX is here

2014-04-02 Thread Ryan Coleman
Wouldn’t a layer-3 switch be a good investment in this situation? Put the load on another device instead of, what is for all intents and (definitely) purpose a thin, light-weight piece of hardware? On Apr 2, 2014, at 3:17 PM, Thinker Rix wrote: > On 2014-04-02 17:35, Eugen Leitl wrote: >> Apu.

Re: [pfSense] successor to ALIX is here

2014-04-02 Thread Thinker Rix
On 2014-04-02 17:35, Eugen Leitl wrote: Apu.1c http://www.heise.de/newsticker/meldung/Embeddded-Mainboard-mit-x86-CPU-und-Coreboot-2160404.html http://www.pcengines.ch/apu1c.htm in stock, €105.13 Unfortunately again only 3 NICs... and Realteks with bad performance. I would love to see such a

Re: [pfSense] successor to ALIX is here

2014-04-02 Thread Jim Pingle
On 4/2/2014 10:35 AM, Eugen Leitl wrote: > Apu.1c > http://www.heise.de/newsticker/meldung/Embeddded-Mainboard-mit-x86-CPU-und-Coreboot-2160404.html We've been watching that one for a while. There have been some detailed discussions on the forum about it as well. > http://www.pcengines.ch/apu1c.

Re: [pfSense] successor to ALIX is here

2014-04-02 Thread Ryan Coleman
That said - This might be what I need. The 2D13 board I have right now is getting pegged pretty hard. On Apr 2, 2014, at 9:38 AM, Ryan Coleman wrote: > Translated to English: > http://translate.google.com/translate?sl=auto&tl=en&js=n&prev=_t&hl=en&ie=UTF-8&u=http%3A%2F%2Fwww.heise.de%2Fnewstic

Re: [pfSense] successor to ALIX is here

2014-04-02 Thread Ryan Coleman
Translated to English: http://translate.google.com/translate?sl=auto&tl=en&js=n&prev=_t&hl=en&ie=UTF-8&u=http%3A%2F%2Fwww.heise.de%2Fnewsticker%2Fmeldung%2FEmbeddded-Mainboard-mit-x86-CPU-und-Coreboot-2160404.html&act=url — ryan On Apr 2, 2014, at 9:35 AM, Eugen Leitl wrote: > > Apu.1c > http

[pfSense] successor to ALIX is here

2014-04-02 Thread Eugen Leitl
Apu.1c http://www.heise.de/newsticker/meldung/Embeddded-Mainboard-mit-x86-CPU-und-Coreboot-2160404.html http://www.pcengines.ch/apu1c.htm in stock, €105.13 ___ List mailing list List@lists.pfsense.org https://lists.pfsense.org/mailman/listinfo/list