Carl Johnson on 14 Jul 2017 09:07:50 -0700


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] Brighter plans: energy efficient, reliable firewall hardware


There's one thing that was mentioned once before, on this list, in a different thread. Just a polite word of caution....

If anyone is planning on putting pfSense on one of these, or something similar, AES-NI support will be a requirement in later versions starting with 2.4.



On July 14, 2017 11:30:14 AM EDT, Will <staticphantom@gmail.com> wrote:
Fitlet is on Amazon if you want, something like this looks interesting https://www.amazon.com/Firewall-micro-appliance-Gigabit-Intel/dp/B01AJEJG1A/ref=sr_1_1?ie=UTF8&qid=1500046164&sr=8-1&keywords=fitlet

-Will 

On Fri, Jul 14, 2017 at 8:04 AM, Eric Lucas <eric@lucii.org> wrote:
That's an impressive device Keith!
One general question I have is when I see the specifications and there are
2x USB 3.0
4x USB 2.0
it makes me wonder why does anybody include 2.0 any more?
I'm guessing that 3.0 costs more / consumes more power ?
or if you plug in existing 2.0 devices on 3.0 ports then the 3.0 devices
are limited to 2.0 speeds?

What do you mean by bare metal build?

Eric

On Fri, Jul 14, 2017 at 1:00 AM, Keith C. Perry
<kperry@daotechnologies.com> wrote:
> We're doing small bare metal builds on the Compulab Fitlets (generally the fitlet-RM-XA10-LAN Barebone, http://www.fit-pc.com/web/products/specifications/fitlet-rm-models-specifications/?model%5B%5D=FITLET-R-GI-C67-WACB&model%5B%5D=FITLET-R-GX-C67-FLAN-W) this is the newer industrial model with 4 1GbE ports.
>
> They've been rock solid so far- including for router and security nodes deployments.
>
> ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
> Keith C. Perry, MS E.E.
> Managing Member, DAO Technologies LLC
> (O) +1.215.525.4165 x2033
> (M) +1.215.432.5167
> www.daotechnologies.com
>
> ----- Original Message -----
> From: "cjf" <cjf@LinuxForce.net>
> To: "PLUG List" <plug@lists.phillylinux.org>
> Sent: Thursday, July 13, 2017 6:31:59 PM
> Subject: [PLUG] Brighter plans: energy efficient, reliable firewall hardware
>
> On a brighter note, I started thinking (again) today about replacing my
> home office's firewall with a new energy efficient box.
>
> I'd want to put Nagios and bind9 on it, so it's more than just a
> firewall. I'd put Debian 9.0 (Stretch) on it.
>
> SSDs make sense for energy efficiency. Probably raid-1 for reliability.
> Probably less than 20GB of storage is needed (no X11).
>
> I have two ISPs, so I'd need 3 Ethernet ports.
>
> 64-bit to avoid the 2038 bug makes sense: I don't plan to reinstall the
> system before 2038 (Debian is infinitely upgradeable!), so I wouldn't
> want that deadline hanging over my head (I'm on a tear to get rid of
> 32-bit hardware from my life: better now than in 2037!!!). I suppose I
> might replace the box by moving the SSDs into a more energy efficient
> container in 10 years. But to avoid reformatting the disks, it would
> need to be 64-bit from the start, no?
>
> Is there cheap, energy efficient Linux-capable hardware with a small
> footprint for this kind of application? What would you recommend?
>
> --
> CJ Fearnley                 |   LinuxForce Inc.
> cjf@LinuxForce.net          |   IT Projects & Systems Maintenance
> http://www.LinuxForce.net   |   http://blog.remoteresponder.net
> ___________________________________________________________________________
> Philadelphia Linux Users Group         --        http://www.phillylinux.org
> Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
> General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug
> ___________________________________________________________________________
> Philadelphia Linux Users Group         --        http://www.phillylinux.org
> Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
> General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug

___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug