Will on 14 Jul 2017 17:04:08 -0700


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] Brighter plans: energy efficient, reliable firewall hardware


I've run system-d containers in production. Debbootstrap makes making the most light weight containers possible and will get you everything you want rivaling what you want from VM's. 

-Will

On Jul 14, 2017 20:00, "KP" <kperry@daotechnologies.com> wrote:
Bare metal = the system installed is providing service and not just acting as a VM host.

In other words a regular server install. I will say however that I have had to run VM guests on it before and it is not horrible. I build them with 8Gb so light VM work is ok.

I haven't done any container work but it would probably do well there too.

On July 14, 2017 8:04:37 AM EDT, Eric Lucas <eric@lucii.org> wrote:
That's an impressive device Keith!
One general question I have is when I see the specifications and there are
2x USB 3.0
4x USB 2.0
it makes me wonder why does anybody include 2.0 any more?
I'm guessing that 3.0 costs more / consumes more power ?
or if you plug in existing 2.0 devices on 3.0 ports then the 3.0 devices
are limited to 2.0 speeds?

What do you mean by bare metal build?

Eric

On Fri, Jul 14, 2017 at 1:00 AM, Keith C. Perry
<kperry@daotechnologies.com> wrote:
We're doing small bare metal builds on the Compulab Fitlets (generally the fitlet-RM-XA10-LAN Barebone, http://www.fit-pc.com/web/products/specifications/fitlet-rm-models-specifications/?model%5B%5D=FITLET-R-GI-C67-WACB&model%5B%5D=FITLET-R-GX-C67-FLAN-W) this is the newer industrial model with 4 1GbE ports.

They've been rock solid so far- including for router and security nodes deployments.

~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
Keith C. Perry, MS E.E.
Managing Member, DAO Technologies LLC
(O) +1.215.525.4165 x2033
(M) +1.215.432.5167
www.daotechnologies.com

----- Original Message -----
From: "cjf" <cjf@LinuxForce.net>
To: "PLUG List" <plug@lists.phillylinux.org>
Sent: Thursday, July 13, 2017 6:31:59 PM
Subject: [PLUG] Brighter plans: energy efficient, reliable firewall hardware

On a brighter note, I started thinking (again) today about replacing my
home office's firewall with a new energy efficient box.

I'd want to put Nagios and bind9 on it, so it's more than just a
firewall. I'd put Debian 9.0 (Stretch) on it.

SSDs make sense for energy efficiency. Probably raid-1 for reliability.
Probably less than 20GB of storage is needed (no X11).

I have two ISPs, so I'd need 3 Ethernet ports.

64-bit to avoid the 2038 bug makes sense: I don't plan to reinstall the
system before 2038 (Debian is infinitely upgradeable!), so I wouldn't
want that deadline hanging over my head (I'm on a tear to get rid of
32-bit hardware from my life: better now than in 2037!!!). I suppose I
might replace the box by moving the SSDs into a more energy efficient
container in 10 years. But to avoid reformatting the disks, it would
need to be 64-bit from the start, no?

Is there cheap, energy efficient Linux-capable hardware with a small
footprint for this kind of application? What would you recommend?

--
CJ Fearnley | LinuxForce Inc.
cjf@LinuxForce.net | IT Projects & Systems Maintenance
http://www.LinuxForce.net | http://blog.remoteresponder.net


Philadelphia Linux Users Group -- http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug


Philadelphia Linux Users Group -- http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug


Philadelphia Linux Users Group -- http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug

--
Sent from my Android device with K-9 Mail. Please excuse my brevity.

___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug

___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug