Re: Simple PF Router/Firewall/NAT requirements: was Performance optimizing OpenBSD 7.2

no On Wed, Feb 15, 2023 at 10:21 PM Steve Litt wrote: > Claudio Jeker said on Wed, 15 Feb 2023 14:14:11 +0100 > > > >I think the state-mismatch is a result of hitting the state limit and > >not the other way around. At over 90'000 states the default timeouts > >are reduced by more than 50% and

Simple PF Router/Firewall/NAT requirements: was Performance optimizing OpenBSD 7.2

Claudio Jeker said on Wed, 15 Feb 2023 14:14:11 +0100 >I think the state-mismatch is a result of hitting the state limit and >not the other way around. At over 90'000 states the default timeouts >are reduced by more than 50% and so states are removed too soon >resulting in a state-mismatch. >

Re: for those looking for hardware to build an OBSD router/firewall

I'm not sure why this would be better than just buying an old intel/AMD machine and adding an extra NIC to it? It won't be the prettiest looking machine but will definitely get the job done. --- Aisha blog.aisha.cc On 2020-01-24 04:52, myml...@gmx.com wrote: Hi All, I've been looking for

for those looking for hardware to build an OBSD router/firewall

Hi All, I've been looking for hardware to replace my 15 year old i386 pc based openbsd firewall with 6 interfaces with something smaller and with less power draw for a while, a long while..:). I researched and saw things from lanner, axiomtek and portwell, but they were mad expensive. I have

Re: Current thinking on OpenBSD "router" "firewall" role separation ?

et >> mangling), this would be representative of what I would do for a >> "traditional" setup: >> >> (BGP)         (BGP) >>    |                  | >> ["router"] ["router"]    |  \          /  | >>     |      \    /    | >&g

Re: Current thinking on OpenBSD "router" "firewall" role separation ?

ion whilst maintaining > integrity and security ? > > If you forgive my attempt at ASCII art (which I hope survives internet > mangling), this would be representative of what I would do for a > "traditional" setup: > > (

Current thinking on OpenBSD "router" "firewall" role separation ?

my attempt at ASCII art (which I hope survives internet mangling), this would be representative of what I would do for a "traditional" setup: (BGP)         (BGP)    |                  | ["router"] ["router"]    |  \          /  |     |      \    /    |     |   

Re: board ord boards with case for a router firewall

On Thu, Nov 2, 2017 at 7:20 PM, Stuart Henderson <s...@spacehopper.org> wrote: > On 2017-11-02, Markus Rosjat <ros...@ghweb.de> wrote: >> Hi there, >> >> we use mostly soekris for ourt router/firewall solution with openBSD but >> since there seems to be not

Re: board ord boards with case for a router firewall

On 2017-11-02, Markus Rosjat <ros...@ghweb.de> wrote: > Hi there, > > we use mostly soekris for ourt router/firewall solution with openBSD but > since there seems to be not much of development and they are kinda > expensive still... I was wondering if you guys could giv

board ord boards with case for a router firewall

Hi there, we use mostly soekris for ourt router/firewall solution with openBSD but since there seems to be not much of development and they are kinda expensive still... I was wondering if you guys could give some suggestions on other Hardware for this usecase? Also Boards with more then 4

Re: OpenBSD router / firewall / gateway device

On Tue, September 19, 2017 10:25 pm, Usexy Nerd wrote: > https://beagleboard.org/x15 > > > What is BeagleBoard-X15? > > BeagleBoard-X15 is the top performing, mainline Linux enabled, > power-usersâ** > dream board with a core tailored for

Re: OpenBSD router / firewall / gateway device

https://beagleboard.org/x15 What is BeagleBoard-X15? BeagleBoard-X15 is the top performing, mainline Linux enabled, power-users’ dream board with a core tailored for every computing task and a highspeed interface for every connectivity

OpenBSD router / firewall / gateway device

Hello, I am interested how well the ARM platform is supported. Does anyone know of a low cost dual ethernet arm board that I could use to build an OpenBSD based router / gateway device? I'd be interested in hearing experiences from the community. I don't care so much about wifi capability I

good router/firewall sbc?

Greetings, Looking for recommendations for a good small device with the following: * 4GbE interfaces * external USB * external serial port * can run obsd well I've checked out the Soekris stuff, but wondering what else people use and like. -- Regards, -C

Soekris net6501-70 as a router+firewall

Is anyone here using the Soekris net6501-70 as a router+firewall? If so what kind of performance are you seeing (throughput, PPS, etc)? I'm considering this system for a 30-40 user environment. It will handle web, ssh, voip, and other basic traffic. QoS will be needed. Thanks. -Gene

Re: Soekris net6501-70 as a router+firewall

dont have exact PPS for you, but it should be able to do 30mbit/sec easily. - Original Message - From: Gene gh5...@gmail.com To: misc@openbsd.org Sent: Friday, February 15, 2013 9:20:21 AM Subject: Soekris net6501-70 as a router+firewall Is anyone here using the Soekris net6501-70

Re: Soekris net6501-70 as a router+firewall

: Soekris net6501-70 as a router+firewall Is anyone here using the Soekris net6501-70 as a router+firewall? If so what kind of performance are you seeing (throughput, PPS, etc)? I'm considering this system for a 30-40 user environment. It will handle web, ssh, voip, and other basic traffic

Re: Soekris net6501-70 as a router+firewall

Subject: Soekris net6501-70 as a router+firewall Is anyone here using the Soekris net6501-70 as a router+firewall? If so what kind of performance are you seeing (throughput, PPS, etc)? I'm considering this system for a 30-40 user environment. It will handle web, ssh, voip, and other basic

Re: Soekris net6501-70 as a router+firewall

Even a 5501 or Alix would probably be enough for that quantity of user. If your in north america, you should look lanner fw-7535 that cost less than a net6501-70. It's a great router and lanner have a really good customer support, one of the best I have seen. Michel

Re: Soekris net6501-70 as a router+firewall

it pretty well. I dont have exact PPS for you, but it should be able to do 30mbit/sec easily. - Original Message - From: Gene gh5...@gmail.com To: misc@openbsd.org Sent: Friday, February 15, 2013 9:20:21 AM Subject: Soekris net6501-70 as a router+firewall Is anyone here using

router/firewall

Where can I find some information or some sort of guide for how to setup and configure OpenBSD to install on an old PC to use as a router and firewall?

Re: router/firewall

On Fri, Sep 04, 2009 at 01:33:50AM -0700, Sha'ul wrote: Where can I find some information or some sort of guide for how to setup and configure OpenBSD to install on an old PC to use as a router and firewall? The OpenBSD Installation Guide http://www.openbsd.org/faq/faq4.html (#1 hit for

Re: router/firewall

http://openbsd.org/faq/pf/index.html --- James A. Peltier james_a_pelt...@yahoo.ca --- On Fri, 9/4/09, Sha'ul pbap...@gmail.com wrote: From: Sha'ul pbap...@gmail.com Subject: router/firewall To: misc@openbsd.org Received: Friday, September 4, 2009, 4:33 AM Where can I find some

Re: router/firewall

Sha'ul wrote: Where can I find some information or some sort of guide for how to setup and configure OpenBSD to install on an old PC to use as a router and firewall? This is very useful article: http://www.benjaminheckmann.de/howto/openbsd42_altq_v2.7.pdf Regs, Ivo __

Re: router/firewall

Thank you for the info. I was not looking for anything for how to install OpenBSD, but only for how to use it as a router and wireless access point system for network

Re: router/firewall

On Fri, Sep 4, 2009 at 11:31 AM, Sha'ulpbap...@gmail.com wrote: Thank you for the info. I was not looking for anything for how to install OpenBSD, but only for how to use it as a router and wireless access point system for network The difference between the two installs is almost zero.

Re: router/firewall PF

[EMAIL PROTECTED] wrote: I'm looking for a basic router/firewall configuration http://home.nuug.no/~peter/pf/en/ There's also this one: Firewalling IPv6 with OpenBSD's pf (packet filter) https://solarflux.org/pf/pf+IPv6.php IPv6 will be required in a number of governments starting

router/firewall PF

Just wanted to get some feedback on setting up pf(4) as a router/firewall only (no nat involved). I've been digging the list archive but most of the configurations on them has the a natted network. I'm looking for a basic router/firewall configuration. any help would be greatly appreciated

Re: router/firewall PF

Beavis wrote: Just wanted to get some feedback on setting up pf(4) as a router/firewall only (no nat involved). I've been digging the list archive but most of the configurations on them has the a natted network. I'm looking for a basic router/firewall configuration. any help would be greatly

Re: Hardware recommendations for OpenBSD carp router/firewall machines

i don't do pf/carp on them, but ibm x3550's are awesome general purpose servers and I do not see why they would not be excellent pf boxes. On Dec 7, 2007 2:13 PM, Bob Beck [EMAIL PROTECTED] wrote: * Matthew Dempsky [EMAIL PROTECTED] [2007-12-06 15:54]: Does anyone have recommendations on

Re: Hardware recommendations for OpenBSD carp router/firewall machines

* Matthew Dempsky [EMAIL PROTECTED] [2007-12-06 15:54]: Does anyone have recommendations on server hardware for setting up a redundant OpenBSD firewall? Right now our network handles several million HTTP requests per day, and we expect that to continue growing. I expect a simple pair of Dell

Re: Hardware recommendations for OpenBSD carp router/firewall machines

On 12/7/07, Bob Beck [EMAIL PROTECTED] wrote: I run an awful lot of simple pairs of Dell Rackmounted servers. (as well as hp, ibm. etc.) I've done this with dell 950's, 1650, 1750, 1850, and 1435's - lately I buy 1435's... Awesome, we actually have two spare 1435s that we decided to

Hardware recommendations for OpenBSD carp router/firewall machines

Does anyone have recommendations on server hardware for setting up a redundant OpenBSD firewall? Right now our network handles several million HTTP requests per day, and we expect that to continue growing. I expect a simple pair of Dell rackmounted servers should handle this easily, but I thought

Router-firewall seems to have trouble when there is a lot of connections

Hi, I've been using my little OpenBSD box as a router since 3.2 and never had any trouble. I use it to share the net within our 5 appartments building. Recently I found that my internet was having trouble, long delay opening web pages, lots of lost connectoin, horrible ping times and such.

wireless bridge router/firewall

I recently got cable. The modem is installed on the third floor of the house. We have a wireless router which allows me to connect my laptop, and we have an xp machine and a ps2 hooked wired to two of the four wired ports on the router. I wanted to build my own router/firewall but the modem

Re: wireless bridge router/firewall

to build my own router/firewall but the modem is in someone elses room and they don't want to have a machine sitting in there. What I want to do is somehow build a box that is a router/firewall but connects to the internet using the wireless signal, so I can set up my own router in my room