ha firewall hardware suggestions

2014-05-15 Thread Waldemar Brodkorb
Hi OpenBSD hackers, At work we have a firewall on two Dell PowerEdge 2940 servers, with 10 NIC's in use, which I want to substiute in the near future. The second machine act as cold standby. I would like to use OpenBSD pf and carp/pfsync to make a ha firewall. I further want to use an embedded

Re: ha firewall hardware suggestions

2014-05-15 Thread Adam Thompson
OpenBSD pf and carp/pfsync to make a ha firewall. I further want to use an embedded system to reduce heat and power consumption in our server room. What hardware would you suggest? Would a Soekris net6501-30 with two lan1841 be powerful enough to route and filter ip traffic for 50 clients

Re: ha firewall hardware suggestions

2014-05-15 Thread Waldemar Brodkorb
Hi, Adam Thompson wrote, At work we have a firewall on two Dell PowerEdge 2940 servers, with 10 NIC's in use, which I want to substiute in the near future. The second machine act as cold standby. Err... 10 NICs and Reduce Power Heat don't usually belong together in the same

Re: ha firewall hardware suggestions

2014-05-15 Thread Stuart Henderson
and carp/pfsync to make a ha firewall. I further want to use an embedded system to reduce heat and power consumption in our server room. What hardware would you suggest? Would a Soekris net6501-30 with two lan1841 be powerful enough to route and filter ip traffic for 50 clients in the LAN and 50

Re: HA firewall

2005-06-27 Thread Paolo Perrucci
Till now the firewalls seems to be stable. No panic for now. It seems the first small step was in the right direction... Thank you Rogier. Now my last problem regards the pf weird logs. I have two type of strange logs: 1) Jun 27 15:51:09 ip-11-53 /bsd: pfsync: ignoring stale update (4) id:

Re: HA firewall

2005-06-27 Thread Bryan Irvine
I used to get similar errors with dhcpd, and noticed the clock was about 18 hours off. Setting the time and turning on ntpd seemed to fix that issue. --Bryan On 6/27/05, Paolo Perrucci [EMAIL PROTECTED] wrote: Till now the firewalls seems to be stable. No panic for now. It seems the first

Re: HA firewall

2005-06-24 Thread Paolo Perrucci
received any reply. Before report another bug I would like to know if someone else had similar experiences. Thanks Paolo knitti ha scritto: On 6/23/05, Paolo Perrucci [EMAIL PROTECTED] wrote: Hi all, I'm trying to setup an ha firewall using carp and pfsync. I tried 3.6 and 3.7 version

HA firewall

2005-06-23 Thread Paolo Perrucci
Hi all, I'm trying to setup an ha firewall using carp and pfsync. I tried 3.6 and 3.7 version but both test fails with different kernel panic. In my last attempt I used the 3.7 version (-stable) on both the firewall but after some hours the primary box fails with this kernel panic: panic

Re: HA firewall

2005-06-23 Thread Paolo Perrucci
if someone else had similar experiences. Thanks Paolo knitti ha scritto: On 6/23/05, Paolo Perrucci [EMAIL PROTECTED] wrote: Hi all, I'm trying to setup an ha firewall using carp and pfsync. I tried 3.6 and 3.7 version but both test fails with different kernel panic. In my last attempt I