Hiya folks, I'm thinking I might put a more formal note together for you guys on this, but I'm wondering first, if you might be interested in linking to something via the site about how well Sun Ray gets on with various commercial network crypto devices.
While not under significant load (only using a couple of Sun Rays and a single server...) I've personally found SRS 5.2 on top of Solaris 10 TX (Update 5; I suspect it wouldn't change much for Update 7 and later; Solaris 11 may be rather different ;-) ) works just fine with Barron McCann X-Kryptor and X-Kryptor Lite between Sun Rays and the FOGs which serve them. Also, some people I know have tested with larger numbers of Sun Rays using EADS Ectocryp Blue and TRL CATAPAN, and Ectocryp Blue was considered to support larger numbers of clients. When it comes to inline crypto - which tends to be seen by the Sun Ray network either as a router (therefore requiring a DHCP helper, if DHCP is in use from the FOG) or a "bump in the wire" Ethernet bridge, depending on vendor and config - looking at them purely empirically, hardware crypto units tend to be less happy dealing with lots of small packets, than with a smaller number of larger packets which, when aggregated over time, give the same overall data rate. By their nature, Sun Rays tend to produce lots of small packets, when in normal use. Therefore, it's always worth testing a hardware encryptor under representative load, where feasible, to see whether the encryptor is able to deal with this unconventional packet mix as well as its datasheet indicates it deals with a more conventional one. labelledsecurity.co.uk needs a whole bunch of work doing on it right now, but I'm thinking I could (shortly...) get a page up and take contributions to add to this list... Cheers, -- Dave Walker Labelled Security Limited Tel: +44 780 3079264 Twitter: @labeledsecurity http://www.labelledsecurity.co.uk/ Labelled Security Limited is registered in England and Wales, No. 7666489 ; VAT 114 6198 23 Registered Office: 1 Andromeda House, Calleva Park, Aldermaston, Berkshire, RG7 8AP _______________________________________________ SunRay-Users mailing list [email protected] http://www.filibeto.org/mailman/listinfo/sunray-users
