Re: [PLUG] Brighter plans: energy efficient, reliable firewall hardware

["Keith C. Perry" <kperry@daotechnologies.com>]

We're doing small bare metal builds on the Compulab Fitlets (generally the fitlet-RM-XA10-LAN Barebone, http://www.fit-pc.com/web/products/specifications/fitlet-rm-models-specifications/?model%5B%5D=FITLET-R-GI-C67-WACB&model%5B%5D=FITLET-R-GX-C67-FLAN-W) this is the newer industrial model with 4 1GbE ports.

They've been rock solid so far- including for router and security nodes deployments.

~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ 
Keith C. Perry, MS E.E. 
Managing Member, DAO Technologies LLC 
(O) +1.215.525.4165 x2033 
(M) +1.215.432.5167 
www.daotechnologies.com

----- Original Message -----
From: "cjf" <cjf@LinuxForce.net>
To: "PLUG List" <plug@lists.phillylinux.org>
Sent: Thursday, July 13, 2017 6:31:59 PM
Subject: [PLUG] Brighter plans: energy efficient, reliable firewall hardware

On a brighter note, I started thinking (again) today about replacing my
home office's firewall with a new energy efficient box.

I'd want to put Nagios and bind9 on it, so it's more than just a
firewall. I'd put Debian 9.0 (Stretch) on it.

SSDs make sense for energy efficiency. Probably raid-1 for reliability.
Probably less than 20GB of storage is needed (no X11).

I have two ISPs, so I'd need 3 Ethernet ports.

64-bit to avoid the 2038 bug makes sense: I don't plan to reinstall the
system before 2038 (Debian is infinitely upgradeable!), so I wouldn't
want that deadline hanging over my head (I'm on a tear to get rid of
32-bit hardware from my life: better now than in 2037!!!). I suppose I
might replace the box by moving the SSDs into a more energy efficient
container in 10 years. But to avoid reformatting the disks, it would
need to be 64-bit from the start, no?

Is there cheap, energy efficient Linux-capable hardware with a small
footprint for this kind of application? What would you recommend?

-- 
CJ Fearnley                 |   LinuxForce Inc.
cjf@LinuxForce.net          |   IT Projects & Systems Maintenance
http://www.LinuxForce.net   |   http://blog.remoteresponder.net
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug