Great Circle Associates Firewalls
(April 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Lecture on firewall performance
From: ferg @ usa . pipeline . com (Paul Ferguson)
Date: Tue, 25 Apr 1995 21:07:34 -0400
To: George Mullins <george @ wicked . neato . org>
Cc: firewalls @ GreatCircle . COM, Dermot Tynan <dtynan @ karpov . ilo . dec . com>

 
On Tue, 25 Apr 1995, 'George Mullins' said: 
 
>Yes you are.  Most application relays being installed now are only 
>supporting T1 circuits, not ethernet.  Spreading the load over 
>multiple different ethernet connections will certainly be better than 
>trying to get the relay to run at FDDI or T3 speeds, but even ethernet 
>speeds will outrun an application relay under load. 
> 
>You then also have the added issue of complexity, configration 
>management and administration to deal with when using multiple boxes. 
> 
 
 
I think that you' re not thinking.  ;-) 
 
I certainly can't think of anyone who places their firewall _on_ a T1
interface, at least 
not foolishly. 
 
Most folks that I know place a 'firewall' behind their wide-area/internet
connection, and 
snake it to across a dummy ethernet to another router or host. 
 
Sigh. 
 
-- 
Paul Ferguson            ferg @
 usa .
 pipeline .
 com 

Indexed By Date Previous: Re: firewall test specifications
From: amolitor @ anubis . network . com (Andrew Molitor)
Next: Re: Firewall failure modes (was Re: performance)
From: patrick @ oes . amdahl . com (Patrick Horgan)
Indexed By Thread Previous: Re: Lecture on firewall performance
From: jgs @ aads . net (John G. Scudder)
Next: Magazine Article on Firewalls
From: CUETARA @ zorzal . metro . inter . edu

Google
 
Search Internet Search www.greatcircle.com