recommended hardware for Gigabit firewall?

pecially the network cards and motherboards? Anything that I should avoid - hardware known to have issues with this kind of requirements? -- Florin Andrei http://florin.myip.org/

Re: hardware needed for network stack performance work

ready for production) -- Florin Andrei http://florin.myip.org/

Re: recommended hardware for Gigabit firewall?

Daniel Ouellet wrote: Florin Andrei wrote: I'm building several firewalls that need to be able to sustain 1000 Mbit throughput. We're using AMD64 processors a lot, so that's the kind of architecture I'm looking at right now. I will use OpenBSD 4.1 64 bit version. The

max number of connections through the firewall

? -- Florin Andrei http://florin.myip.org/

firewall is very slow, something's wrong

hard limit 1000 table-entries hard limit 10 OS FINGERPRINTS: 696 fingerprints loaded -- Florin Andrei http://florin.myip.org/

Re: firewall is very slow, something's wrong

Stuart Henderson wrote: On 2007/10/04 17:48, Florin Andrei wrote: All firewall rules are written as stateless as possible - I don't need stateful filtering, the setup is very simple (allow HTTP inbound, allow a few ICMP types, and that's it). congestion

Re: firewall is very slow, something's wrong

Florin Andrei wrote: I expected OpenBSD 4.1 to do better. But the thing is, even without the UDP flood, the OpenBSD firewall is very slow. I am downloading a huge file through it, via HTTP, and all I get is 4 Mbyte / sec. With Linux I get 112 Mbyte / sec. Something's wrong. Or I&#x

Re: firewall is very slow, something's wrong

port 0x2f8/8 irq 3: ns16550a, 16 byte fifo pckbc0 at isa0 port 0x60/5 pckbd0 at pckbc0 (kbd slot) pckbc0: using irq 1 for kbd slot wskbd0 at pckbd0: console keyboard, using wsdisplay0 pcppi0 at isa0 port 0x61 midi0 at pcppi0: spkr0 at pcppi0 dkcsum: wd0 matches BIOS drive 0x80 root on wd0a rootdev=0x0 rrootdev=0x300 rawdev=0x302 -- Florin Andrei http://florin.myip.org/

Re: firewall is very slow, something's wrong

whats the Mainbords bios rev? Tyan Transport GT24-B3992 BIOS Date: 03/06/07 09:36:13 Ver: 08.00.11 -- Florin Andrei http://florin.myip.org/

Re: firewall is very slow, something's wrong

needs to be integrated in an environment with dynamic routing, it will need to run some kind of dynamic routing daemon(s). For that, I'd like to have at least two cores on the system, and a kernel that can take advantage of them. If the SMP kernel does not actually hurt performance, I migh

Re: firewall is very slow, something's wrong

Henning Brauer wrote: * Florin Andrei <[EMAIL PROTECTED]> [2007-10-09 19:34]: then, an i386 kernel should perform considerably better than amd64 for firewalling/routing/... That is surprising. What is the reason? we dunno really. it hasn't been benched in sometimesoit might not ev

Re: [side thread] security implcations of multiple kernel threads?

#x27;ll keep testing with 4.2 -- Florin Andrei http://florin.myip.org/

SOLVED [was: firewall is very slow, something's wrong]

Florin Andrei wrote: ## Huge performance improvements in the network stack, including: * In pf, store routing table ID, queue ID etc directly in the packet header mbuf instead of using mbuf tags (which use malloc'd memory). This yields a 100% improvement in pf perfor

Re: SOLVED [was: firewall is very slow, something's wrong]

and netblast, please post it. I'm especially interested in generating lots of small packets, which is difficult. -- Florin Andrei http://florin.myip.org/

Re: Great 4.2 song!

Matthias Pfeifer wrote: just received my openbsd 4.2 CD set. And THANKS for this great song. A kind of funky mixed with good old rock ;) Anybody can put a .flac or even .wav.gz copy for me on a server somewhere? My CD is scratched about 2/3 into the song. :-( -- Florin Andrei http

Re: Great 4.2 song!

Jeremy C. Reed wrote: On Wed, 17 Oct 2007, Florin Andrei wrote: Anybody can put a .flac or even .wav.gz copy for me on a server somewhere? My CD is scratched about 2/3 into the song. :-( Not a flac or wav, but see http://www.openbsd.org/lyrics.html Well, I was hoping to rebuild the

various openntpd things

logs? With ntp.org there are various tools that the user could run to get the current status. That's a requirement if you want to monitor the time sync status of your servers via Nagios or something like that. -- Florin Andrei http://florin.myip.org/ [demime 1.01d removed an attachment of t

Re: various openntpd things

On 10/22/2010 02:09 PM, Florin Andrei wrote: First off, see attachment for an updated version of the spec file for the portable version tarball. Apparently attachments are removed. Okay, here's an online copy: http://dl.dropbox.com/u/29966/openbsd/openntpd.spec.txt -- Florin Andrei