North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: cpu needed to NAT 45mbs

  • From: Christopher Morrow
  • Date: Thu Nov 08 16:42:26 2007
  • Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:sender:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth; bh=Ytuo3h3BLoCGqyPX49gpOQQmEao7r4+pNxLcB1Zfkdw=; b=Iny7cLIL53TKzI+pQL4+TKweG8xSnyYKcQnbMI45lPQH2s5CRDuej/2SvslXLc+JzYMz9aALHtUa5EW1mQDUVSVq2uaGQ2VtRLegcve5ZfUU4st7dnlqpNk4IgQyznZqNev9hmOjOWQbsosXdSOKcToAXmee3TZug2BQA/OxGHs=
  • Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:sender:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth; b=gy2Lp+WouvKQrR98v8hkZi290LsWrex1OAAfxtTrGv/IcI0fMzVWZQCioT4cidGJfc46cxEnlld9HLyQN/S2x2rgCuB3nV9o5IFe2MKaiuicq7rfh6C6A+8q7U4SeN8vT3ifipa9TiXzvG8AefD48Q23REnmL7J6N4GzHKylEHY=
On 11/8/07, Carl Karsten <[email protected]> wrote:
>
> I do the networking in my house, and hang out with guys that do networking in
> small offices that have a few T1s.   Now I am talking to people about a DS3
> connection for 500 laptops*, and I am bing told "a p4 linux box with 2 nics
> doing NAT will not be able to handle the load."   I am not really qualified to
> say one way or the other.  I bet someone here is.

how about just looking at what a production MSSP would roll out for a
similar situation.. a nokia ip530-class box (I think it's a ip580
these days) with Checkpoint as the 'firewall'... Certainly (poke fbsd
fanboys) a fbsd box of similar config can perform as well, yes? :)

I recall the ip530 being an intel P3-ish system
(http://www.google.com/search?hl=en&q=nokia+ip530&btnG=Google+Search)
I think we selected these at a past job because it could handle 2 quad
FE cards and a DS3 card...