firewall hardware

2023-12-13 Thread Alexei Malinin
Hello! Please advise me hardware for an OpenBSD firewall: - 8 gigabit ethernet interfaces, - >= 4 Gbps throughput. Thanks, Alexei

Re: ARM Firewall Hardware

2015-01-20 Thread Patrick Wildt
Am 16.01.2015 um 08:49 schrieb Jonathan Gray j...@jsg.id.au: On Fri, Jan 16, 2015 at 07:59:49AM +0100, Christer Solskogen wrote: On Wed, Jan 14, 2015 at 7:19 PM, Christer Solskogen christer.solsko...@gmail.com wrote: On Wed, Jan 14, 2015 at 3:39 PM, Jonathan Gray j...@jsg.id.au wrote: I've

Re: ARM Firewall Hardware

2015-01-16 Thread Patrick Wildt
Am 16.01.2015 um 08:49 schrieb Jonathan Gray j...@jsg.id.au: On Fri, Jan 16, 2015 at 07:59:49AM +0100, Christer Solskogen wrote: On Wed, Jan 14, 2015 at 7:19 PM, Christer Solskogen christer.solsko...@gmail.com wrote: On Wed, Jan 14, 2015 at 3:39 PM, Jonathan Gray j...@jsg.id.au wrote: I've

Re: ARM Firewall Hardware

2015-01-15 Thread Christer Solskogen
On Wed, Jan 14, 2015 at 7:19 PM, Christer Solskogen christer.solsko...@gmail.com wrote: On Wed, Jan 14, 2015 at 3:39 PM, Jonathan Gray j...@jsg.id.au wrote: I've updated the kernel at http://jsg.id.au/openbsd/bsd.IMX.umg And we have lift-off! Will the changes go in-tree soon? :-) -- chs

Re: ARM Firewall Hardware

2015-01-15 Thread Jonathan Gray
On Fri, Jan 16, 2015 at 07:59:49AM +0100, Christer Solskogen wrote: On Wed, Jan 14, 2015 at 7:19 PM, Christer Solskogen christer.solsko...@gmail.com wrote: On Wed, Jan 14, 2015 at 3:39 PM, Jonathan Gray j...@jsg.id.au wrote: I've updated the kernel at http://jsg.id.au/openbsd/bsd.IMX.umg

Re: ARM Firewall Hardware

2015-01-14 Thread Jonathan Gray
On Tue, Jan 13, 2015 at 06:52:00PM +0100, Christer Solskogen wrote: On Tue, Jan 13, 2015 at 5:45 PM, Jonathan Gray j...@jsg.id.au wrote: Your earlier mail had a different load address than what I'd expect. Try 0x1880 Same. I've tried the following staring adresses: 0x1060 -

Re: ARM Firewall Hardware

2015-01-14 Thread Christer Solskogen
On Wed, Jan 14, 2015 at 3:39 PM, Jonathan Gray j...@jsg.id.au wrote: I've updated the kernel at http://jsg.id.au/openbsd/bsd.IMX.umg And we have lift-off! ## Booting kernel from Legacy Image at 1080 ... Image Name: boot Created: 2015-01-14 14:13:27 UTC Image Type: ARM

Re: ARM Firewall Hardware

2015-01-13 Thread Christer Solskogen
On Tue, Jan 13, 2015 at 5:45 PM, Jonathan Gray j...@jsg.id.au wrote: Your earlier mail had a different load address than what I'd expect. Try 0x1880 Same. I've tried the following staring adresses: 0x1060 - 0x1880 - 0x1080 The last one is what I use to boot bitrig. CM-FX6 #

Re: ARM Firewall Hardware

2015-01-13 Thread Christer Solskogen
On Tue, Jan 13, 2015 at 2:42 AM, Jonathan Gray j...@jsg.id.au wrote: Thanks, I've added the missing case for Utilite. A kernel that includes this change can be found here: http://jsg.id.au/openbsd/bsd.IMX.umg Now I got a bit further: Starting kernel ... OpenBSD/imx booting ... arg0 0x0

Re: ARM Firewall Hardware

2015-01-13 Thread Jonathan Gray
On Tue, Jan 13, 2015 at 04:56:22PM +0100, Christer Solskogen wrote: On Tue, Jan 13, 2015 at 2:42 AM, Jonathan Gray j...@jsg.id.au wrote: Thanks, I've added the missing case for Utilite. A kernel that includes this change can be found here: http://jsg.id.au/openbsd/bsd.IMX.umg Now I got

Re: ARM Firewall Hardware

2015-01-12 Thread Christer Solskogen
On Mon, Jan 12, 2015 at 2:07 PM, Jonathan Gray j...@jsg.id.au wrote: If you could provide some details as to why it doesn't boot perhaps it will in future. Sure thing. What do you need? -- chs

Re: ARM Firewall Hardware

2015-01-12 Thread Jonathan Gray
On Sun, Jan 11, 2015 at 02:27:38PM +0100, Christer Solskogen wrote: On Mon, Jan 5, 2015 at 10:31 AM, f5b f...@163.com wrote: according http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/arch/armv7/armv7/armv7.c?rev=1.4 Only one board supported in current with two Gigabit ports ,Compulab

Re: ARM Firewall Hardware

2015-01-12 Thread Jonathan Gray
Thanks, I've added the missing case for Utilite. A kernel that includes this change can be found here: http://jsg.id.au/openbsd/bsd.IMX.umg On Mon, Jan 12, 2015 at 07:12:51PM +0100, Patrick Wildt wrote: Looks like the Utilite wasn???t added in the console init code:

Re: ARM Firewall Hardware

2015-01-12 Thread Patrick Wildt
Looks like the Utilite wasn’t added in the console init code: http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/arch/armv7/imx/imx_machdep.c.diff?r1=1.7r2=1.8 Am 12.01.2015 um 18:57 schrieb Christer Solskogen christer.solsko...@gmail.com: On Mon, Jan 12, 2015 at 3:30 PM, Jonathan Gray

Re: ARM Firewall Hardware

2015-01-12 Thread Christer Solskogen
On Mon, Jan 12, 2015 at 3:30 PM, Jonathan Gray j...@jsg.id.au wrote: The serial console output would be a good starting point. (bsd.umg is really bsd.rd.IMX.umg) CM-FX6 # tftp 0x1080 bsd.umg Using FEC device TFTP from server 192.168.0.4; our IP address is 192.168.0.9 Filename 'bsd.umg'.

Re: ARM Firewall Hardware

2015-01-11 Thread Christer Solskogen
On Mon, Jan 5, 2015 at 10:31 AM, f5b f...@163.com wrote: according http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/arch/armv7/armv7/armv7.c?rev=1.4 Only one board supported in current with two Gigabit ports ,Compulab UTILITE box ? Anyone can make sure? OpenBSD still does not boot on

Re: ARM Firewall Hardware

2015-01-11 Thread Patrick Wildt
Am 11.01.2015 um 14:27 schrieb Christer Solskogen christer.solsko...@gmail.com: On Mon, Jan 5, 2015 at 10:31 AM, f5b f...@163.com wrote: according http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/arch/armv7/armv7/armv7.c?rev=1.4 Only one board supported in current with two Gigabit

Re: ARM Firewall Hardware

2015-01-11 Thread Christer Solskogen
Also worth a mention is that only one core is enabled(no smp) and that one core that is active works at 792Mzh and not 1.2 Ghz. On Jan 11, 2015 5:03 PM, Patrick Wildt m...@patrick-wildt.de wrote: Am 11.01.2015 um 14:27 schrieb Christer Solskogen christer.solsko...@gmail.com: On Mon, Jan

Re: ARM Firewall Hardware

2015-01-05 Thread f5b
according http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/arch/armv7/armv7/armv7.c?rev=1.4 Only one board supported in current with two Gigabit ports ,Compulab UTILITE box ? Anyone can make sure? http://www.compulab.co.il/utilite-computer/web/utilite-models

Re: ARM Firewall Hardware

2015-01-05 Thread Diana Eichert
Do the 1Gb interfaces support real 1Gb/sec? I know there was some arm h/w with 1Gb interfaces that would not run at 1Gb speed. diana On Mon, 5 Jan 2015, Patrick Wildt wrote: Until recently there has not been ARM hardware that actually has more than two Gigabit Ethernet ports. As of now

Re: ARM Firewall Hardware

2015-01-05 Thread Patrick Wildt
You mean the i.MX6 SoC? Yeah, that one is limited to 540 MBit/s by design. In comparison to the i.MX series the LayerScape models are supposed to be network processors. So, even though they have a tendency to fuck things up, I don't think they also do that on something that already worked with

ARM Firewall Hardware

2015-01-04 Thread Predrag Punosevac
I started entertain the idea of getting ARM based hardware for my new home firewall. Are there ARM based consumer motherboards with Gigabit lan controller which can be used for home firewall hobby project? How close is armv7 or any other OpenBSD version of being fully functional on such hardware?

Re: ARM Firewall Hardware

2015-01-04 Thread Patrick Wildt
Until recently there has not been ARM hardware that actually has more than two Gigabit Ethernet ports. As of now there are two options: There’s the Banana Pi R1, which basically is a bigger Banana Pi with 5 Gigabit Ports connected to a Broadcom BCM53125 Switch. The BPI-R1, also called Lamobo R1

ha firewall hardware suggestions

2014-05-15 Thread Waldemar Brodkorb
Hi OpenBSD hackers, At work we have a firewall on two Dell PowerEdge 2940 servers, with 10 NIC's in use, which I want to substiute in the near future. The second machine act as cold standby. I would like to use OpenBSD pf and carp/pfsync to make a ha firewall. I further want to use an embedded

Re: ha firewall hardware suggestions

2014-05-15 Thread Adam Thompson
On May 15, 2014 2:29:00 AM EDT, Waldemar Brodkorb m...@waldemar-brodkorb.de wrote: Hi OpenBSD hackers, At work we have a firewall on two Dell PowerEdge 2940 servers, with 10 NIC's in use, which I want to substiute in the near future. The second machine act as cold standby. I would like to use

Re: ha firewall hardware suggestions

2014-05-15 Thread Waldemar Brodkorb
Hi, Adam Thompson wrote, At work we have a firewall on two Dell PowerEdge 2940 servers, with 10 NIC's in use, which I want to substiute in the near future. The second machine act as cold standby. Err... 10 NICs and Reduce Power Heat don't usually belong together in the same

Re: ha firewall hardware suggestions

2014-05-15 Thread Stuart Henderson
On 2014-05-15, Waldemar Brodkorb m...@waldemar-brodkorb.de wrote: Hi OpenBSD hackers, At work we have a firewall on two Dell PowerEdge 2940 servers, with 10 NIC's in use, which I want to substiute in the near future. The second machine act as cold standby. I would like to use OpenBSD pf and