From owner-freebsd-security Tue Sep 22 00:59:15 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id AAA12875 for freebsd-security-outgoing; Tue, 22 Sep 1998 00:59:15 -0700 (PDT) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from shell6.ba.best.com (shell6.ba.best.com [206.184.139.137]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id AAA12868 for ; Tue, 22 Sep 1998 00:59:13 -0700 (PDT) (envelope-from jkb@best.com) Received: from localhost (jkb@localhost) by shell6.ba.best.com (8.9.0/8.9.0/best.sh) with SMTP id AAA07361; Tue, 22 Sep 1998 00:58:36 -0700 (PDT) X-Authentication-Warning: shell6.ba.best.com: jkb owned process doing -bs Date: Tue, 22 Sep 1998 00:58:36 -0700 (PDT) From: "Jan B. Koum " X-Sender: jkb@shell6.ba.best.com To: Tomaz Borstnar cc: freebsd-security@FreeBSD.ORG Subject: Re: performance comparision of ipfilter and ipfw In-Reply-To: <199809220726.AAA07687@hub.freebsd.org> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org I haven't done any benchmarks, but I can try to answer you other questions: make sure to pick a good supported PCI card. At this moment Intel EtherExpress 10/100B comes to mind (fxp0). I am sure P200 will be enough for a firewall - but it also depend on how much traffic are you pushing through. Having more ram will help - 256 is overkill if system will ONLY do firewall. Don't really need a lot of disk unless you are going to do a lot of logging (with tools like tcpdump or nfr). -- Yan I don't have the password .... + Jan Koum But the path is chainlinked .. | Spelled Jan, pronounced Yan. There. So if you've got the time .... | Web: http://www.best.com/~jkb Set the tone to sync ......... + OS: http://www.FreeBSD.org On Tue, 22 Sep 1998, Tomaz Borstnar wrote: >Hello! > > Anyone did testing on performance of IPFW and IPFilter? From feature list >it looks like IPfilter has better interface and more features, but what >about perfomance? Also what kind of machine would you suggest for firewall? >As fast as possible CPU, 256MB RAM and plenty of disk? > >Tomaz > >---- >Tomaz Borstnar >"Love is the answer to the final question you ask" - Unknown > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message