Great Circle Associates Firewalls
(June 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Address Translation and FW-1 (latency)
From: security @ qualix . com (Nik D. Knoth)
Date: Fri, 28 Jun 1996 17:47:45 -0700 (PDT)
To: ODIORMA @ mail . charmeck . nc . us (Mark Odiorne)
Cc: firewalls @ greatcircle . com
In-reply-to: <s1c9537e . 033 @ mail . charmeck . nc . us> from "Mark Odiorne" at Jun 20, 96 12:22:37 pm

Mark,

 Network Address Translation (NAT) will have some (probably
negligible) effect on performance simply because it uses CPU
cycles.  Unless you are doing a truly ridiculous number of
translations, tho, you should not have to worry about a 
"notible degradation of performance".

-nik
--
/\/ik I. /<noth             Email:   nik @
 qualix .
 com  
Qualix Support Team      Office:  415.638.4106    
The Qualix Group, Inc.   Fax:     415.572.1300    


> 
>  A slightly different topic, have you seen any notible
> degradation of performance while doing address translation
> with Firewall-1?    ie., running a private Class B network
> inside the FW and translating to a range of legal addresses
> to access the 'net.     We are about to make a decision to
> move back to a private address scheme inside the FW, and I
> have heard several opinions about the effects and latency it
> will have on our SPARC-5. I am a Novell guru, not a UNIX
> guru, so:  Looking for your opinion...
> 
>  Mark Odiorne   Network Analyst
>  Mecklenburg County   IT Dept.
>  odiorma @
 mail .
 charmeck .
 nc .
 us
> 
> 
> 


Indexed By Date Previous: Firewall -1 Or Raptor on NT Server Platform
From: Ken Kearley <KEARLEY @ wapa . GOV>
Next: Re: How good is "stateful inspection"? (fwd)
From: Darren Reed <avalon @ coombs . anu . edu . au>
Indexed By Thread Previous: Firewall -1 Or Raptor on NT Server Platform
From: Ken Kearley <KEARLEY @ wapa . GOV>
Next: Re: Stateful Packet Screens
From: Darren Reed <avalon @ coombs . anu . edu . au>

Google
 
Search Internet Search www.greatcircle.com