[CentOS] Firewall/Gateway Hardware Question

[Steve Clark]

On 10/15/2013 06:05 PM, SilverTip257 wrote:
> On Tue, Oct 15, 2013 at 2:31 PM, Steve Clark <sclark at netwolves.com> wrote:
>
>> Hi,
>>
>> we are running 51 ipsec vpns on an Atom D510 at 1.66ghz and the load
>> average is .07.
>>
> @Steve:
> Based on your statement, I figure you do not have a crypto accelerator and
That is correct - we do you AES which is an easier calculation than 3DES
> the CPU is handling all the crypto.  Correct?
>
> @Terre:
> I don't know how VIA C7 CPUs stack up against the Intel Atom CPUs in terms
> of performance, but they're low power consuming x86 processors.  And
> there's the VIA Padlock [0] security/encryption engine.
>
> AMD Geode CPUs like those in PC Engines ALIX [1] hardware have an
> integrated crypto accelerator [2].  If it wasn't for your web proxy
> requirements, etc an ALIX might fit the bill (with the right embedded OS -
> think Voyage Linux). You're better off with the hardware you're researching
> right now though.
>
> [0] http://www.via.com.tw/en/initiatives/padlock/hardware.jsp
> [1] http://www.pcengines.ch/alix.htm
> [2] http://www.twam.info/hardware/alix/using-geodes-aes-engine-on-alix3d3
>
>
>> HTH,
>> Steve
>>
>> On 10/15/2013 02:13 PM, Terre Porter wrote:
>>> I've not worked with Atom processors but I'll look in to it.
>>>
>>> Thanks for the info.
>>>
>>>
>>> -----Original Message-----
>>> From: centos-bounces at centos.org [mailto:centos-bounces at centos.org] On
>> Behalf
>>> Of SilverTip257
>>> Sent: Tuesday, October 15, 2013 12:36 PM
>>> To: CentOS mailing list
>>> Subject: Re: [CentOS] Firewall/Gateway Hardware Question
>>>
>>> On Tue, Oct 15, 2013 at 12:29 PM, Terre Porter <
>> tporter at webpage-builders.com
>>>> wrote:
>>>> I've given up on getting the other machine to work so I'm looking at
>>>> building a new one.
>>>>
>>>> The machine will be a firewall/gateway running NAT, Web Proxy with
>>>> Dansguardian, DHCP, DNS, NTP and VPN (~6 clients).
>>>>
>>>> I read so much about VPN encryption and the processor needs, now I am
>>>> unsure if this will work.
>>>>
>>> You'll likely need to determine how many VPN tunnels you're going to run
>>> simultaneously and then find benchmarks on the web.
>>>
>>>
>>>> I can get this for AMD FX-8120 Zambezi 3.1GHz Socket AM3+ 125W
>> Eight-Core
>>>> Desktop Processor for under $120 (it's on sale), would it work ?
>>>>
>>> Seems like overkill to me.
>>>
>>> I'd suggest more along the lines of an Atom-CPU based system.  One of
>> those
>>> mini-ITX setups that use 20W or thereabouts.
>>>
>>> Just my two cents.
>>>
>>>
>>>> Any thoughts?
>>>>
>>>> Thanks,
>>>> Terre
>>>>
>>>>
>>>> _______________________________________________
>>>> CentOS mailing list
>>>> CentOS at centos.org
>>>> http://lists.centos.org/mailman/listinfo/centos
>>>>
>>>
>>
>> --
>> Stephen Clark
>> *NetWolves*
>> Director of Technology
>> Phone: 813-579-3200
>> Fax: 813-882-0209
>> Email: steve.clark at netwolves.com
>> http://www.netwolves.com
>> _______________________________________________
>> CentOS mailing list
>> CentOS at centos.org
>> http://lists.centos.org/mailman/listinfo/centos
>>
>
>


-- 
Stephen Clark
*NetWolves*
Director of Technology
Phone: 813-579-3200
Fax: 813-882-0209
Email: steve.clark at netwolves.com
http://www.netwolves.com