<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#ffffff">
On 12/30/2010 07:34 AM, Eero Volotinen wrote:
<blockquote
cite="mid:AANLkTin31sT6MGjoYLuNY6mGRrK+KVG5Z--piCRFF7Ok@mail.gmail.com"
type="cite">
<pre wrap="">2010/12/30 Steve Clark <a class="moz-txt-link-rfc2396E" href="mailto:sclark@netwolves.com"><sclark@netwolves.com></a>:
</pre>
<blockquote type="cite">
<pre wrap="">On 12/29/2010 01:23 AM, Nataraj wrote:
On 12/28/2010 09:04 PM, Eero Volotinen wrote:
2010/12/29 John R Pierce <a class="moz-txt-link-rfc2396E" href="mailto:pierce@hogranch.com"><pierce@hogranch.com></a>:
On 12/28/10 1:55 PM, Nataraj wrote:
- fast enough to do openvpn encryption on WAN links ranging from 50mb
to 100mb
THAT is a tough requirement.
I was going to recommend the Alix boards. they run pfSense really
nicely, and should be able to run a stripped down centos install OK.
with pfSense, you can boot from a CF card, so no HD at all.
The Alix cards use a 433-500Mhz AMD Geode ultra-low power processor, on
a 6x6 card. they use 5 watts fully configured.
but, 100Mbit/sec SSL encryption, ouch. don't know. you'd probably
have to benchmark that.
you need hardware encryption hardware or core2duo like processor ..
--
Eero
_______________________________________________
CentOS mailing list
<a class="moz-txt-link-abbreviated" href="mailto:CentOS@centos.org">CentOS@centos.org</a>
<a class="moz-txt-link-freetext" href="http://lists.centos.org/mailman/listinfo/centos">http://lists.centos.org/mailman/listinfo/centos</a>
Then the Mac mini might be what I need performancewise. I am also
considering Dell R210's as I would really like an enterprise solution.
Anyone have any experience with Habey?
<a class="moz-txt-link-freetext" href="http://www.habeyusa.com/products.php?id=125#Menu=ChildMenu124">http://www.habeyusa.com/products.php?id=125#Menu=ChildMenu124</a> They have
a wide selection of barebones Intel Atoms, including the 1.8Ghz Intel
D525's as well as Pentium 4's with broadcom ethernets and systems with
up to 6 ethernets. My sense is that I will still use some of these
systems for firewall and management functions (i.e. firewalling Dell
IDRAC6 cards) even if the encryption for the vpn has to run on a faster
box. 50MB would probably be adequate.
Thank you all for your responses.
Nataraj
Hi,
We use the following. It has hardware encryption in the EDEN Via processor.
We were able to get 22 mbits across an ipsec tunnel using AES encryption.
This more than enough unless you have a DS3 circuit.
<a class="moz-txt-link-freetext" href="http://www.acrosser.com/products/detail_id_427.html">http://www.acrosser.com/products/detail_id_427.html</a>
</pre>
</blockquote>
<pre wrap="">
IE only website :(
So, you are using padlock hw encryption on device?
</pre>
</blockquote>
Yes it is supported by the padlock.ko module in Centos. It can also be
used by openssl.<br>
/lib/modules/2.6.18-194.17.4.el5/kernel/drivers/crypto/padlock.ko<br>
<br>
<div class="moz-signature">-- <br>
Stephen Clark<br>
<b>NetWolves</b><br>
Sr. Software Engineer III<br>
Phone: 813-579-3200<br>
Fax: 813-882-0209<br>
Email: <a class="moz-txt-link-abbreviated" href="mailto:steve.clark@netwolves.com">steve.clark@netwolves.com</a><br>
<a class="moz-txt-link-freetext" href="http://www.netwolves.com">http://www.netwolves.com</a><br>
</div>
</body>
</html>