Re: Hardware recommendation for small form factor, noiseless, server

2024-05-09 Thread James Johnson
Thanks a lot to you all for these recommendations.

Re: Hardware recommendation for small form factor, noiseless, server

2024-05-08 Thread Страхиња Радић
Дана 24/05/08 02:37PM, Karsten Pedersen написа: > [...] The C program can be as simple as compiling "Hello World" to exhibit the > issue. Takes about 15 seconds to compile "Hello World". [...] On a Lenovo IdeaPad 3-15IGL05 81WQ[1] laptop: $ time sh -c "printf '#include \\nint main() {

Re: Hardware recommendation for small form factor, noiseless, server

2024-05-08 Thread Karsten Pedersen
> What exactly is "good" with OpenBSD? I summarize the issues in my last email > So again, what is "slow"? The machine running OpenBSD. Compared to similar ThinkCenters I have (m73 Tiny and m92 Tiny). Also a Raspberry Pi 3 (running OpenBSD at lowest freq). It seems not to be the SSD disk

Re: Hardware recommendation for small form factor, noiseless, server

2024-05-07 Thread Johannes Thyssen Tishman
2024-05-07T09:54:23Z "Karsten Pedersen" : > > Second-hand Lenovo M710q tiny with a wifi-card could also work: > > https://dmesgd.nycbug.org/index.cgi?do=view=5296 > > A quick note that the slightly older M625q (with an AMD processor) isn't > quite so good with OpenBSD. > It runs overly slow and I

Re: Hardware recommendation for small form factor, noiseless, server

2024-05-07 Thread Mihai Popescu
> A quick note that the slightly older M625q (with an AMD processor) isn't > quite so good with OpenBSD. What exactly is "good" with OpenBSD? > It runs overly slow and I have yet had time to figure out why. So again, what is "slow"? > Interestingly, even on apm -H it takes longer to compile a

Re: Hardware recommendation for small form factor, noiseless, server

2024-05-07 Thread Karsten Pedersen
> Second-hand Lenovo M710q tiny with a wifi-card could also work: > https://dmesgd.nycbug.org/index.cgi?do=view=5296 A quick note that the slightly older M625q (with an AMD processor) isn't quite so good with OpenBSD. It runs overly slow and I have yet had time to figure out why. Interestingly,

Re: Hardware recommendation for small form factor, noiseless, server

2024-05-07 Thread Mizsei Zoltán
Second-hand Lenovo M710q tiny with a wifi-card could also work: https://dmesgd.nycbug.org/index.cgi?do=view=5296 Jan Stary írta 2024. máj.. 7, K-n 08:47 órakor: > On May 06 21:03:17, mytraddr...@gmail.com wrote: >> Hi all, >> >> can anyone please advise on what computer I can purchase with the

Re: Hardware recommendation for small form factor, noiseless, server

2024-05-07 Thread Jan Stary
On May 06 21:03:17, mytraddr...@gmail.com wrote: > Hi all, > > can anyone please advise on what computer I can purchase with the following > requirements: > > - fully supports OpenBSD > - no noise > - good quality wifi > - small form factor preferably > - processor does not need to be fast (no

Re: Hardware recommendation for small form factor, noiseless, server

2024-05-06 Thread Martin
On Mon, May 06, 2024 at 09:03:17PM +0100, James Johnson wrote: > Hi all, > > can anyone please advise on what computer I can purchase with the following \ > requirements: > - fully supports OpenBSD > - no noise > - good quality wifi > - small form factor preferably > - processor does not need to

Re: Hardware recommendation for small form factor, noiseless, server

2024-05-06 Thread Zé Loff
On Mon, May 06, 2024 at 09:03:17PM +0100, James Johnson wrote: > Hi all, > > can anyone please advise on what computer I can purchase with the following > requirements: > > - fully supports OpenBSD > - no noise > - good quality wifi > - small form factor preferably > - processor does not need

Re: Hardware recommendation for small form factor, noiseless, server

2024-05-06 Thread Jo MacMahon
I recently switched my RockPro64 over to OpenBSD and so far everything works nicely with it. I had trouble getting it to boot at first, but it was my fault for not fully reading the installation instructions[1], and assuming that I could simply `dd` the provided miniroot75.img to an SD card and

Re: Hardware recommendation for small form factor, noiseless, server

2024-05-06 Thread Implausibility
For various values of 'fully supports', I have multiple odroid HC4 units, and they all run very well. I've booted them with OpenBSD to play with it, but inevitably switched back to Linux. No built-in WiFi, but it has a single USB socket that you could plug in a WiFi/Bluetooth dongle. -JD. >

Hardware recommendation for small form factor, noiseless, server

2024-05-06 Thread James Johnson
Hi all, can anyone please advise on what computer I can purchase with the following requirements: - fully supports OpenBSD - no noise - good quality wifi - small form factor preferably - processor does not need to be fast (no highly intensive compute load) - low RAM need - needs 1 TB of hard

Re: ipsec hardware recommendation

2023-09-14 Thread Marko Cupać
Hi, thank you for suggestions, took me some time to think about them and reply here. On Fri, 11 Aug 2023 14:19:44 - (UTC) Stuart Henderson wrote: > If you post your IPsec configuration, perhaps someone can suggest > whether the choice of ciphers etc could be improved. It can make > quite a

Re: ipsec hardware recommendation

2023-08-11 Thread David Gwynne
> On 11 Aug 2023, at 21:08, Marko Cupać wrote: > > Hi, > > I have star topology network where dozens of spokes communicate with > other spokes through central hub over GRE tunnels protected with > transport-mode ipsec. > > This worked great for years, but lately all the locations got

Re: ipsec hardware recommendation

2023-08-11 Thread Stuart Henderson
On 2023-08-11, Marko Cupać wrote: > Hi, > > I have star topology network where dozens of spokes communicate with > other spokes through central hub over GRE tunnels protected with > transport-mode ipsec. > > This worked great for years, but lately all the locations got bandwidth > upgrade

Re: ipsec hardware recommendation

2023-08-11 Thread Matthew Ernisse
On Fri, Aug 11, 2023 at 01:08:07PM +0200, Marko Cupać said: Are there any commands I can run which would indicate ipsec traffic is being throttled due to hardware being underspecced? top shows CPU is more than 50% idle. netstat shows ~1 Ierrs / Ifail (no Oerrs / Ifail) on interfaces that

ipsec hardware recommendation

2023-08-11 Thread Marko Cupać
Hi, I have star topology network where dozens of spokes communicate with other spokes through central hub over GRE tunnels protected with transport-mode ipsec. This worked great for years, but lately all the locations got bandwidth upgrade (spokes: 10Mbit -> 50Mbit, hub: 2x200Mbit -> 2x500Mbit),

Re: hardware recommendation for openbsd-based thin client?

2016-06-06 Thread Predrag Punosevac
Stuart Henderson wrote: > On 2016-05-26, Predrag Punosevac wrote: > > Right now at Carnegie Mellon University I use Intel NUC NUC5CPYH > .. > > I have tested OpenBSD on it but without X. > > On some NUC models everything works very well. On others there are some > problems

Re: hardware recommendation for openbsd-based thin client?

2016-05-30 Thread Patrick Dohman
Has anyone tried a ViewSonic thin client? > On May 26, 2016, at 7:40 AM, Marko Cupać wrote: > > Hi, > > I need to implement a few dozen boxes whose only purpose will be > connecting to RDP servers. I have figured out the software part - > OpenBSD + slim + openbox +

Re: hardware recommendation for openbsd-based thin client?

2016-05-28 Thread frantisek holop
i don't have experience with the compute sticks, but i would start with updating the BIOS. https://downloadcenter.intel.com/download/25917/BIOS-Update-SCCHTAX5-86A- noah pugsley, 26 May 2016 20:59: > bios0: vendor Intel Corp. version "SCCHTAX5.86A.0014.2015.1119.1410" date > 11/19/2015 > bios0:

Re: hardware recommendation for openbsd-based thin client?

2016-05-28 Thread Henri Kemppainen
I have a Shuttle DS437 and DS57U7 for desktop. Fanless, small, and the former in particular is pretty affordable. These are sold as barebones so you only add the components you need -- in your case, probably nothing but RAM. Do note that the case must stand upright, so they're not as convenient

Re: hardware recommendation for openbsd-based thin client?

2016-05-28 Thread Stuart Henderson
On 2016-05-28, Carson Chittom wrote: > Stuart Henderson writes: > >> On 2016-05-27, Marko Cupać wrote: >>> Hi, >>> >>> I have just noticed that pcengines has alix models with VGA ports: >>> >>> http://www.pcengines.ch/alix3d3.htm

Re: hardware recommendation for openbsd-based thin client?

2016-05-28 Thread Carson Chittom
Stuart Henderson writes: > On 2016-05-27, Marko Cupać wrote: >> Hi, >> >> I have just noticed that pcengines has alix models with VGA ports: >> >> http://www.pcengines.ch/alix3d3.htm >> http://www.pcengines.ch/alix1e.htm >> >> Anyone tried OpenBSD on

Re: hardware recommendation for openbsd-based thin client?

2016-05-27 Thread Stuart Henderson
On 2016-05-27, Marko Cupać wrote: > Hi, > > I have just noticed that pcengines has alix models with VGA ports: > > http://www.pcengines.ch/alix3d3.htm > http://www.pcengines.ch/alix1e.htm > > Anyone tried OpenBSD on them? Yep. It worked, including X - I used one with

Re: hardware recommendation for openbsd-based thin client?

2016-05-27 Thread John
On Thu, May 26, 2016 at 02:40:09PM +0200, Marko Cupać wrote: > Hi, > > I need to implement a few dozen boxes whose only purpose will be > connecting to RDP servers. I have figured out the software part - > OpenBSD + slim + openbox + freerdp, but I haven't yet decided about the > hardware part. It

Re: hardware recommendation for openbsd-based thin client?

2016-05-27 Thread Kamil Cholewiński
I have an alix 2d3 (no vga) running on 5.9 as a jumphost for ssh. It's slow. It's *very* slow. Usable more or less only as a router, firewall, jumphost, ntp, etc that sort of appliance. If you'd like, I can run some benchmarks for common tasks like pkg_add or a compile, so you can get an idea.

Re: hardware recommendation for openbsd-based thin client?

2016-05-27 Thread Marko Cupać
Hi, I have just noticed that pcengines has alix models with VGA ports: http://www.pcengines.ch/alix3d3.htm http://www.pcengines.ch/alix1e.htm Anyone tried OpenBSD on them? Regards, -- Before enlightenment - chop wood, draw water. After enlightenment - chop wood, draw water. Marko Cupać

Re: hardware recommendation for openbsd-based thin client?

2016-05-26 Thread noah pugsley
> In the last month? I suspect not. > > This is how rumours start, I guess. > I suppose so. OpenBSD 6.0-beta (GENERIC.MP) #2127: Thu May 26 08:25:13 MDT 2016 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP RTC BIOS diagnostic error

Re: hardware recommendation for openbsd-based thin client?

2016-05-26 Thread Theo de Raadt
> I bought one recently since EFI support and haven't had much luck. Hope you > don't mind me asking here, I didn't ask the list before as I didn't put > that much work into it but havent gotten it to boot. Tried from usb. In the last month? I suspect not. This is how rumours start, I

Re: hardware recommendation for openbsd-based thin client?

2016-05-26 Thread noah pugsley
Have you booted OpenBSD on a compute stick or seen a dmesg from one? I bought one recently since EFI support and haven't had much luck. Hope you don't mind me asking here, I didn't ask the list before as I didn't put that much work into it but havent gotten it to boot. Tried from usb. On Thu,

Re: hardware recommendation for openbsd-based thin client?

2016-05-26 Thread Stuart Henderson
On 2016-05-26, Predrag Punosevac wrote: > Right now at Carnegie Mellon University I use Intel NUC NUC5CPYH .. > I have tested OpenBSD on it but without X. On some NUC models everything works very well. On others there are some problems like X not working. Video is the

Re: hardware recommendation for openbsd-based thin client?

2016-05-26 Thread Predrag Punosevac
Zdravo Marko, About 7 years ago I implemented something similar while at Georgia State University. I used Wyse Thin Clients (it was C90LE IIRC) and they worked like a charm. I see that Dell took over Wyse in 2012. Right now at Carnegie Mellon University I use Intel NUC NUC5CPYH (2 cores Intel

Re: hardware recommendation for openbsd-based thin client?

2016-05-26 Thread bytevolcano
Hello Marko, Perhaps look into VIA's EPIA boards. They offer a pico-ITX form factor (pretty close to the size of an audio cassette), with VGA and keyboard. Whilst not all of the features (eg. watchdog) will work, it should do for your purposes. I have used a P900 board and it seems to work fine.

hardware recommendation for openbsd-based thin client?

2016-05-26 Thread Marko Cupać
Hi, I need to implement a few dozen boxes whose only purpose will be connecting to RDP servers. I have figured out the software part - OpenBSD + slim + openbox + freerdp, but I haven't yet decided about the hardware part. It needs to be of amd64 architecture, and it needs to run OpenBSD. Local

Hardware recommendation?

2011-06-20 Thread Nick Hasser
I want to replace my current firewall (Compaq DL360) with something smaller, quieter (preferably fanless), and less power-hungry. It is currently only NAT'ing my home network, which is about 10 clients. I have a 15Mbps/1Mbps cable internet connection, with D-Link Gigabit switches on the

Re: Hardware recommendation?

2011-06-20 Thread Paul Suh
Nick, I'm getting about 40 Mbit/sec throughput with a Soekris Net4801, so the 5501 or 2d13 are both more than enough box for basic filtering. A lot depends on how much content filtering you want to do. Some simple QoS and squid rules won't place any serious load on it, but if you want to use

Re: Seeking inexpensive RAID 1 hardware recommendation

2010-11-19 Thread m...@mdaniel.de
My conclusion: B Marco's suggestion that I look for cards with the letters IR/IS or IM led me to buy a Fujitsu LSI MegaRAID 1064 Part-NoS26361-F3257-L4 which has the -IR in its firmware name and a SAS1064LE chip. It looks good but I'm still waiting for the SAS - SATA cable which I forgot to order

Re: Seeking inexpensive RAID 1 hardware recommendation

2010-11-16 Thread Jurjen Oskam
On Mon, Nov 15, 2010 at 06:30:18PM +0100, m...@mdaniel.de wrote: I have a hard time finding a RAID1 capable controller that is well supported via bioctl, available, and not too expensive. Is there e.g. a nice mpi or mpii card that can be controlled via bioctl? The man page only mentions that

Re: Seeking inexpensive RAID 1 hardware recommendation

2010-11-16 Thread Ryan Corder
On Mon, Nov 15, 2010 at 01:47:55PM +0100, Jurjen Oskam wrote: | On Mon, Nov 15, 2010 at 06:30:18PM +0100, m...@mdaniel.de wrote: | | I have a hard time finding a RAID1 capable controller that is well | supported via bioctl, available, and not too expensive. | Is there e.g. a nice mpi or mpii

Seeking inexpensive RAID 1 hardware recommendation

2010-11-15 Thread m...@mdaniel.de
I have a hard time finding a RAID1 capable controller that is well supported via bioctl, available, and not too expensive. Is there e.g. a nice mpi or mpii card that can be controlled via bioctl? The man page only mentions that some mpi cards offer Raid1. Of course it doesn't have to be a mpi

Re: Seeking inexpensive RAID 1 hardware recommendation

2010-11-15 Thread Marco Peereboom
mpi/mpii cards that do IR/IS or IM should do RAID 1 just fine and are supported by bioctl. You just have to purchase the card carefully and make sure it has one of those acronyms. A bit more expensive would be mfi but those are well supported. What I don't know much about but is cheap are the

Re: Seeking inexpensive RAID 1 hardware recommendation

2010-11-15 Thread m...@mdaniel.de
mpi/mpii cards that do IR/IS or IM should do RAID 1 just fine and are supported by bioctl.B You just have to purchase the card carefully and make sure it has one of those acronyms. Thanks for the info. This will make it easier to find the right cards I don't want to appear lazy but finding the

Hardware recommendation request

2008-09-29 Thread nuffnough
Hi, I read the thread that popped up a few months back, and the consensus was to buy a Dell or buy a switch and make VLANs, but neither of these options are suitable for my requirements. I presently have a pair of Intel Servers with 6 pci NICs plus one on board running as a clustered firewall.

Re: Hardware recommendation request

2008-09-29 Thread jmc
--- nuffnough [Mon, Sep 29, 2008 at 01:28:46PM +1000]: --- Or recommend dual port nics that I can use instead of my current intel nics? http://www.intel.com/products/server/adapters/pro1000mt-dualport/pro1000mt-dualport-overview.htm

Re: Hardware recommendation request

2008-09-29 Thread Henning Brauer
* nuffnough [EMAIL PROTECTED] [2008-09-29 19:06]: I presently have a pair of Intel Servers with 6 pci NICs plus one on board running as a clustered firewall. These are getting old, and I want to replace them. Only thing is, I am finding it impossible to find anyone who makes mobos with

Re: Hardware recommendation request

2008-09-29 Thread Leon Dippenaar
I have successfully used the below Nic's on 4.3 and 4.4 -current setups (especially the 4 port version) http://h18004.www1.hp.com/products/servers/networking/index-nic.html They go well with the HP DL range in my experience. Example the HP DL385 will give you 4 PCI express lanes i.e 16

Re: Hardware recommendation request

2008-09-29 Thread bofh
On Sun, Sep 28, 2008 at 11:28 PM, nuffnough [EMAIL PROTECTED] wrote: Can anyone recommend a mobo that does? Or recommend dual port nics that I can use instead of my current intel nics? Intel dual and quad port nics work (though, there were some issues with the latest ones, having to do with

Re: Hardware recommendation request

2008-09-29 Thread Johan Ström
On Sep 29, 2008, at 7:22 PM, bofh wrote: On Sun, Sep 28, 2008 at 11:28 PM, nuffnough [EMAIL PROTECTED] wrote: Can anyone recommend a mobo that does? Or recommend dual port nics that I can use instead of my current intel nics? Intel dual and quad port nics work (though, there were

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-08-15 Thread James Records
:working: -- View this message in context: http://www.nabble.com/Hardware-recommendation-for-firewalls-%28more-than-4-NI Cs%29-tp18413703p18899631.htmlhttp://www.nabble.com/Hardware-recommendation-for-firewalls-%28more-than-4-NICs%29-tp18413703p18899631.html Sent from the openbsd user - misc

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-08-14 Thread secucatcher
On Fri, Aug 8, 2008 at 3:08 PM, James Records [EMAIL PROTECTED]wrote: Grab a Watchguard Firebox X off of ebay, they have 6 interfaces, and you can get them pretty cheap, some of the bigger ones have more, onboard crypto, perfect for building openbsd firewalls... you can run off a CF...

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-08-13 Thread Marco Fretz
Claudio Jeker wrote: On Mon, Aug 11, 2008 at 01:14:53PM +0200, Marco Fretz wrote: Johan Beisser wrote: On Fri, Aug 8, 2008 at 2:59 PM, phoenixcomm [EMAIL PROTECTED] wrote: Hi Gang, well heres my 3 cents, first why use a stupid PC (any os) for routing.. REALY BAD jue,jue brake down and

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-08-13 Thread saqmaster
Sorry to hijack this thread slightly, but it's related I think: I'm looking to create an OpenBSD firewall/router for home. It's going to need to support two ADSL (UK, 8mbit) lines with PPPoA. And then a bunch (4) of f/eth ports, which is simple enough. Could anyone recommend any low-profile pci

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-08-13 Thread Henning Brauer
* Marco Fretz [EMAIL PROTECTED] [2008-08-13 09:31]: Ok, ok. What I said was what Cisco says as in, lies, lies, lies. They call it marketing. Cisco hardware is much more reliable than PCs I can't second that. Cisco and good PC hardware are en par ime. The whole system, Cisco + IOS vs PC-Server

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-08-13 Thread ropers
* Marco Fretz [EMAIL PROTECTED] [2008-08-13 09:31]: If you have the money buy Cisco Routers (or from similar vendors), if you have time and want to save some money use OpenBSD. 2008/8/13 Henning Brauer [EMAIL PROTECTED]: no. If you have the money get somebody clueful to set your OpenBSD

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-08-13 Thread Marco Fretz
Henning Brauer wrote: * Marco Fretz [EMAIL PROTECTED] [2008-08-13 09:31]: Ok, ok. What I said was what Cisco says as in, lies, lies, lies. They call it marketing. Cisco hardware is much more reliable than PCs I can't second that. Cisco and good PC hardware are en par ime. The whole

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-08-13 Thread Diana Eichert
On Wed, 13 Aug 2008, ropers wrote: SNIP NB: According to Wikipedia, Juniper's JUNOS OS is FreeBSD-derived. In other words, it ultimately evolved from the same ancestor OpenBSD evolved from. --ropers So it runs some BSD derivative on it's management card, make no difference on how well the

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-08-13 Thread James Records
Cris :working: -- View this message in context: http://www.nabble.com/Hardware-recommendation-for-firewalls-%28more-than-4-NI Cs%29-tp18413703p18899631.htmlhttp://www.nabble.com/Hardware-recommendation-for-firewalls-%28more-than-4-NICs%29-tp18413703p18899631.html Sent from the openbsd user

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-08-13 Thread ropers
2008/8/13 James Records [EMAIL PROTECTED]: I just got some screenshots of the project up, if you care to take a look: http://www.thewaffle.org/screenshots.html snip pardon the site design, not my forte, hopefully getting someone else to build me something better soon. It's nicer to look at

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-08-11 Thread Marco Fretz
Johan Beisser wrote: On Fri, Aug 8, 2008 at 2:59 PM, phoenixcomm [EMAIL PROTECTED] wrote: Hi Gang, well heres my 3 cents, first why use a stupid PC (any os) for routing.. REALY BAD jue,jue brake down and buy a old Cisco 7200, 7500, 3600 they are all very good routers, I used a 7500 for a

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-08-11 Thread Ryan McBride
On Mon, Aug 11, 2008 at 01:14:53PM +0200, Marco Fretz wrote: How odd. I know at least one site that runs all of their BGP off of OpenBGP on OpenBSD boxes that are dedicated as routers. In all cases, these systems outperform the equivalent Cisco hardware for a fraction of the cost. Forget

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-08-11 Thread Claudio Jeker
On Mon, Aug 11, 2008 at 01:14:53PM +0200, Marco Fretz wrote: Johan Beisser wrote: On Fri, Aug 8, 2008 at 2:59 PM, phoenixcomm [EMAIL PROTECTED] wrote: Hi Gang, well heres my 3 cents, first why use a stupid PC (any os) for routing.. REALY BAD jue,jue brake down and buy a old Cisco 7200,

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-08-11 Thread Paul de Weerd
On Mon, Aug 11, 2008 at 01:14:53PM +0200, Marco Fretz wrote: well heres my 3 cents, first why use a stupid PC (any os) for routing.. REALY BAD jue,jue brake down and buy a old Cisco 7200, 7500, 3600 they are all very good routers, I used a 7500 for a while and now use a 3640 i use pf as

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-08-11 Thread Henning Brauer
* Marco Fretz [EMAIL PROTECTED] [2008-08-11 13:19]: Forget this. Cisco does CEF (cisco express forwarding) that's stream forwarding in hardware. 1) that is best case. some traffic has to go to the main cpu. attackers can provole that and easily overload their tiny host cpus. 2) only the big

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-08-11 Thread Diana Eichert
My day job lets me play with fucking expensive ones, I love that statement Claudio. If you want commercial hardware that handles large PPS rates you get purpose built hardware, not a Cisco router. I also support 100M feeds going through Soekris 5501 running OpenBSD and they perform very well.

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-08-11 Thread Siegbert Marschall
Hi, Forget this. Cisco does CEF (cisco express forwarding) that's stream forwarding in hardware. You don't have a chance to reach this PPS with a yeah, expect that it doesn't route everything and in the moment it falls back to cpu your router is dead. then there I saw all kind of funny and

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-08-08 Thread Toni Mueller
Hi, On Mon, 14.07.2008 at 12:44:15 +0200, Henning Brauer [EMAIL PROTECTED] wrote: The bigger HP Procurve switches are ok. Some shit, as usual, but all in all very usable. what do you mean by bigger? Routers: OpenBSD, what else? Erm, and on the hardware side, please? Kind regards, --Toni++

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-08-08 Thread Henning Brauer
* Toni Mueller [EMAIL PROTECTED] [2008-08-08 19:07]: Hi, On Mon, 14.07.2008 at 12:44:15 +0200, Henning Brauer [EMAIL PROTECTED] wrote: The bigger HP Procurve switches are ok. Some shit, as usual, but all in all very usable. what do you mean by bigger? 5300XL specifically. The other

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-08-08 Thread phoenixcomm
on it... and no bleeding.. enjoy Crazy Cris :working: -- View this message in context: http://www.nabble.com/Hardware-recommendation-for-firewalls-%28more-than-4-NI Cs%29-tp18413703p18899631.html Sent from the openbsd user - misc mailing list archive at Nabble.com.

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-08-08 Thread James Records
/Hardware-recommendation-for-firewalls-%28more-than-4-NI Cs%29-tp18413703p18899631.htmlhttp://www.nabble.com/Hardware-recommendation-for-firewalls-%28more-than-4-NICs%29-tp18413703p18899631.html Sent from the openbsd user - misc mailing list archive at Nabble.com.

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-08-08 Thread Johan Beisser
On Fri, Aug 8, 2008 at 2:59 PM, phoenixcomm [EMAIL PROTECTED] wrote: Hi Gang, well heres my 3 cents, first why use a stupid PC (any os) for routing.. REALY BAD jue,jue brake down and buy a old Cisco 7200, 7500, 3600 they are all very good routers, I used a 7500 for a while and now use a

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-08-08 Thread Claudio Jeker
On Fri, Aug 08, 2008 at 02:59:02PM -0700, phoenixcomm wrote: MartC-n Coco wrote: Hi misc, I'm currently looking for hardware alternatives for firewalls that should have more than four NICs. Currently we are buying R200s from Dell, but we have the 4 NIC limitation. We could tell

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-08-08 Thread patric conant
. and I have a cisco 2900-xl-en switch with 3 vlans on it... and no bleeding.. enjoy Crazy Cris :working: -- View this message in context: http://www.nabble.com/Hardware-recommendation-for-firewalls-%28more-than-4-NI Cs%29-tp18413703p18899631.htmlhttp://www.nabble.com/Hardware

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-08-08 Thread list-obsd-misc
On Fri, Aug 08, 2008 at 06:54:05PM -0500, patric conant wrote: You strongly overestimate the value of your comments (3 cents), it seems like there are many places more appropriate than this one for you to suggest middle-of-the-road hardware running a proprietary OS that has among the worst

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-08-08 Thread list-obsd-misc
So you expect additional reliability from stacking ebayed cisco equipment with OpenBSD bridges behind them, as the original poster mentioned, and cost effectiveness by buying used cisco equipment and paying for relicensing so that you can get updates, compared to setting up OpenBSD boxes as

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-07-16 Thread Russell Howe
Claer wrote, sometime around 15/07/08 07:31: On Mon, Jul 14 2008 at 28:15, Mart?n Coco wrote: Thanks! Have you tried the quad nics on those Dells? We do have a couple of R200s, 860s and 850s running with 2 dual port cards no problem, but we have never tried the quad ports. Hello, I do

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-07-15 Thread Claer
On Mon, Jul 14 2008 at 28:15, Mart?n Coco wrote: Thanks! Have you tried the quad nics on those Dells? We do have a couple of R200s, 860s and 850s running with 2 dual port cards no problem, but we have never tried the quad ports. Hello, I do have around 20 Dell 860 and R200 with 2 cards

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-07-14 Thread Henning Brauer
* Curt Micol [EMAIL PROTECTED] [2008-07-13 16:20]: On Sun, Jul 13, 2008 at 5:55 AM, Henning Brauer [EMAIL PROTECTED] wrote: which is exactly the point. there are too many misconfigured VLAN setups out there, and some vendors (namely: cisco) have fucked up defaults. cisco (at least: used to,

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-07-14 Thread Torsten Frost
On Fri, Jul 11, 2008 at 11:47 PM, Martmn Coco [EMAIL PROTECTED] wrote: Hi misc, I'm currently looking for hardware alternatives for firewalls that should have more than four NICs. Currently we are buying R200s from Dell, but we have the 4 NIC limitation. We could tell Dell to install a quad

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-07-14 Thread Martín Coco
Thanks! Have you tried the quad nics on those Dells? We do have a couple of R200s, 860s and 850s running with 2 dual port cards no problem, but we have never tried the quad ports. Torsten Frost escribis: On Fri, Jul 11, 2008 at 11:47 PM, Martmn Coco [EMAIL PROTECTED] wrote: Hi misc, I'm

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-07-14 Thread Martín Coco
First of all, thanks to all of you that have replied. I've thought of adding VLANs, and will be doing it in the future maybe, but in our current situation, that's not possible; not all the switches support this option, and there's still some concern about security implications (specially in

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-07-14 Thread Torsten Frost
Never done the quad in my maxchines. I havent heard anyone getting fired over it either though. A quick check on dells web indicates you have two pci-e slots in those r200s, why not get two dual nics. On Mon, Jul 14, 2008 at 8:28 PM, Martmn Coco [EMAIL PROTECTED] wrote: Thanks! Have you tried

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-07-13 Thread Henning Brauer
* Gordon Grieder [EMAIL PROTECTED] [2008-07-12 15:27]: [ VLANs ] just work well when configured properly. which is exactly the point. there are too many misconfigured VLAN setups out there, and some vendors (namely: cisco) have fucked up defaults. cisco (at least: used to, not sure about the

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-07-13 Thread Curt Micol
On Sun, Jul 13, 2008 at 5:55 AM, Henning Brauer [EMAIL PROTECTED] wrote: which is exactly the point. there are too many misconfigured VLAN setups out there, and some vendors (namely: cisco) have fucked up defaults. cisco (at least: used to, not sure about the current status, I long abondoned

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-07-12 Thread Jason George
I knew it was a matter of time before the vlan insecurity bullshit hit the fan. RTFA. Who says anything about blindly trusting switches? If you can't correctly configure VLANs on your switches, and filter on vlan(4) interfaces in PF, you shouldn't be administering production networks.

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-07-12 Thread Henning Brauer
* Martmn Coco [EMAIL PROTECTED] [2008-07-12 00:33]: I'm currently looking for hardware alternatives for firewalls that should have more than four NICs. there is a 1u supermicro that has 4 onboard, on PCIe and PCI-X each. gives 12 ems in 1U. -- Henning Brauer, [EMAIL PROTECTED], [EMAIL

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-07-12 Thread Gordon Grieder
On Sat, Jul 12, 2008 at 12:24:46AM -0400, Jason Dixon wrote: I knew it was a matter of time before the vlan insecurity bullshit hit the fan. RTFA. Who says anything about blindly trusting switches? If you can't correctly configure VLANs on your switches, and filter on vlan(4) interfaces in

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-07-12 Thread Gordon Grieder
On Sat, Jul 12, 2008 at 08:24:52AM -0500, Gordon Grieder wrote: Fast forward and we've got these 2960G's everywhere, a couple of 3750G's doing the L3 work and feeding to the hardware out to the world. Nearly 20 VLANs going through various trunks (single gig and etherchannel). The stuff just

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-07-12 Thread Jacob Yocom-Piatt
Martmn Coco wrote: Hi misc, I'm currently looking for hardware alternatives for firewalls that should have more than four NICs. Currently we are buying R200s from Dell, but we have the 4 NIC limitation. We could tell Dell to install a quad port NIC (in addition to the two-port onboard

Hardware recommendation for firewalls (more than 4 NICs)

2008-07-11 Thread Martín Coco
Hi misc, I'm currently looking for hardware alternatives for firewalls that should have more than four NICs. Currently we are buying R200s from Dell, but we have the 4 NIC limitation. We could tell Dell to install a quad port NIC (in addition to the two-port onboard card), but I haven't

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-07-11 Thread Jason Dixon
On Fri, Jul 11, 2008 at 06:47:13PM -0300, Mart?n Coco wrote: Hi misc, I'm currently looking for hardware alternatives for firewalls that should have more than four NICs. Currently we are buying R200s from Dell, but we have the 4 NIC limitation. We could tell Dell to install a quad port

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-07-11 Thread Geoff Steckel
Jason Dixon wrote: On Fri, Jul 11, 2008 at 06:47:13PM -0300, Mart?n Coco wrote: Hi misc, I'm currently looking for hardware alternatives for firewalls that should have more than four NICs. Why could you possibly need 6 physical interfaces? Even if you have a failover pair of firewalls

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-07-11 Thread Jason Dixon
On Fri, Jul 11, 2008 at 10:10:04PM -0400, Geoff Steckel wrote: Jason Dixon wrote: On Fri, Jul 11, 2008 at 06:47:13PM -0300, Mart?n Coco wrote: Hi misc, I'm currently looking for hardware alternatives for firewalls that should have more than four NICs. Why could you possibly need 6

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-07-11 Thread Giancarlo Razzolini
Jason Dixon escreveu: On Fri, Jul 11, 2008 at 10:10:04PM -0400, Geoff Steckel wrote: Jason Dixon wrote: On Fri, Jul 11, 2008 at 06:47:13PM -0300, Mart?n Coco wrote: Hi misc, I'm currently looking for hardware alternatives for firewalls that should have more than four

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-07-11 Thread Jason Dixon
On Sat, Jul 12, 2008 at 01:09:40AM -0300, Giancarlo Razzolini wrote: Wow... I've used 5 interfaces also, but for different internet links. Try do multi routing when you have lot's of different ip's of different ranges on the same if. Your pf rules will be a mess and, in some cases, it

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-07-11 Thread Geoff Steckel
I knew it was a matter of time before the vlan insecurity bullshit hit the fan. RTFA. Who says anything about blindly trusting switches? If you can't correctly configure VLANs on your switches, and filter on vlan(4) interfaces in PF, you shouldn't be administering production networks. There's

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-07-11 Thread Jason Dixon
On Sat, Jul 12, 2008 at 12:35:46AM -0400, Geoff Steckel wrote: I knew it was a matter of time before the vlan insecurity bullshit hit the fan. RTFA. Who says anything about blindly trusting switches? If you can't correctly configure VLANs on your switches, and filter on vlan(4) interfaces

Re: OpenBSD 4.2 hardware recommendation

2007-11-03 Thread VP
If you can live w/o RAID, i recommend advantech.com or nexcom.com Network Security Appliance product lines. Appliance is not very good solution for us. We want buy one good server. Also I find no sense of CARP, because we will have old server as standby. IDS database will be placed on another

Re: OpenBSD 4.2 hardware recommendation

2007-11-03 Thread Richard Toohey
So don't buy an over-the-top firewall ... and donate the difference to OpenBSD? 8-) On 3/11/2007, at 9:25 PM, VP wrote: If you can live w/o RAID, i recommend advantech.com or nexcom.com Network Security Appliance product lines. Appliance is not very good solution for us. We want buy one

Re: OpenBSD 4.2 hardware recommendation

2007-11-03 Thread Stuart Henderson
On 2007/11/03 00:20, VP wrote: It can be SPARC or x86. But vendors don't officially support OpenBSD with their hardware. We need tower server with 1 proccessor, 2 gigs of RAM, 2 SCSI disks and 2 power supply. Does anyone recommend brand server which supports OpenBSD? (in alphabetical order):

  1   2   >