On Mon, 24 Feb 1997 CCCRE .
CCULL @
capital .
ge .
com wrote:
> hmmmm...firewalling at t-3 speeds. maybe i'm missing the point, but
> my previous employer (computer manufacturer, won't mention the name)
> had a t-3 internet connection for both inbound and outbound use, and
> they (obviously) had a firewall. eagle raptor (nt) if my memory
> serves....seems like it was running on a compaq (ahem) proliant
> 5000....it seemed to handle this load with no problem. and it was
> kinda neat having the bottleneck on my internet connection being the
> 10mbs ethernet pipe....
What kind of load did you put on it? Were you saturating the ethernet?
Usually ~6Mb/s is the maximum useful throughput of conventional ethernet,
so this isn't exactly firewalling at T-3 speeds (it's actually ~13%
thereof).
Firewall a T3 off of a 100Mb/s ether or OC-3-speed ATM network and then
I'll believe it. We have multiple 100Mb/s segments hanging off of
multiple DS-3's, and I for one would love to see a Compaq box running NT
keep up with that. I don't think it could. On the flip side, you can
firewall two saturated ethernet segments with a well-tuned 486.
Summary: This is not a T3-speed firewall.
__
Todd Graham Lewis Mindspring Enterprises tlewis @
mindspring .
com
Follow-Ups:
References:
|
|
