Great Circle Associates Firewalls
(January 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Firewall throughput measurements.
From: JOHNSON @ neu . edu
Date: Wed, 08 Jan 1997 07:37:33 -0500 (EST)
To: firewalls @ GreatCircle . com

[decloack]

     I remember sometime back there were firewall throughput questions 
concerning what happens if a firewall box is used with high speed links 
on both sides.  In my case I'm thinking 4 or 16 mb token ring on one
side and similar links on the other or TR to Ethernet or Ethernet to 
Ethernet.  The numbers I've seen are measured with a T1 on one side and 
an Ethernet on the other.  In this case the T1 is the throttle and you 
expect a certain traffic rate.  But it was unknown back then what 
happens in the other cases mentioned above.  No I expect that there will 
be a delay more sigificant than that of a router.  A firewall isn't a 
router; it's a firewall.  A great many firewall functions happen at 
layer 7 while strict routing is a layer 3 issue.  So there's more 
software to plow through generally speaking in a firewall.  And I'm
sure the numbers will depend on just how much firewalling is going on.

     Has anybody done any measurements of what happens when a firewal is 
used between two high speed links?  I'd be very interested in numbers or 
pointers to same.  Thanks.

Chris J.
NU

[recloak]

============================================================================
Chris Johnson                            Internet: johnson @
 nuhub .
 dac .
 neu .
 edu
Assistant Director, Systems              BITNET:   defunct
Division of Academic Computing           Voice:    617.373.3300
Northeastern University, 39RI            FAX:      617.373.8600
360 Huntington Ave.                      50% of all doctors graduated 
Boston, MA. U.S.A. 02115                 in the lower half of the class
============================================================================

Indexed By Date Previous: Re: Re: NCSA != NCSC
From: Sebastian Stache <zeb @ sbbs . se>
Next: Re: Pointcast
From: "Henry W. Farkas" <hfarkas @ ims . advantis . com>
Indexed By Thread Previous: Re: I DON'T HAVE FUNDING FOR A FIREWALL...HELP!!!
From: lists @ lina . inka . de (Bernd Eckenfels)
Next: NFS
From: Tom Szucs <toms @ geo-x . com>

Google
 
Search Internet Search www.greatcircle.com