>
>First not all Internet connections are T1; some folks have faster lines.
>Second, not all firewalls are built between the Internet and an internal
>network; firewalls can and are being used to separate internal networks.
>
>Is screend running on a 486 "fast enough" to keep up at ethernet speed?
>
Yes!
>
>How about faster than a T1?
>
I use a PC with an AMD386/40 with 64 KB cache running NetBSD for the
firewall. Note that this is an ISA bus machine. Calculating out the
amount of time per packet from the CPU time used, I come up with about
2 MBytes / second. Now, a machine based on a 50 MHz DX with 256 KB of
cache should be substantially faster. Using a 3c579 Ethernet card on
an ESDI bus machine will double the Ethernet throughput. Still, you
can't get 2 MBytes / second through a 1.25 MByte pipe.
So, if you look at the real throughput of a DS3, you should be able to
use a 50MHz DX ESDI bus PC to keep up with the traffic.
|
|
