[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: CPU for firewall machine?

We are running a 5x86/133 (super 486 basically) at my current work as a
firewall/router/internet server. Current uptime for this machine is 61

It's mainly running ipmasq, squid, and exim (configured for mail
forwarding) and does light extra duty for my work email (since I'm the
only one who will NOT use outlook express) This machine's aparant main
bottleneck is the ISA bus transfer rate between the NICs and the CPU, as
it has a tendency to bog down a bit with multiple passed-through masq

For a three-way firewall you might want to use a PCI system instead, and
make all your interfaces 10/100.

On Thu, 10 Aug 2000, Nathan E Norman wrote:

> On Thu, Aug 10, 2000 at 04:53:13PM -0400, Paul Reavis wrote:
> > I would have some concern about full speed 10MB routing on a 486, but
> > every time I've checked `top` or similar during heavy routing the CPU
> > has been loafing. Is `top` a good indicator of this, or is it only
> > tracking non-kernel processes?
> CPU is not the issue here.  Speed of the ISA bus is an issue;
> available RAM would be the other ...
> -- 
> Nathan Norman         "Eschew Obfuscation"          Network Engineer
> GPG Key ID 1024D/51F98BB7            http://home.midco.net/~nnorman/
> Key fingerprint = C5F4 A147 416C E0BF AB73  8BEF F0C8 255C 51F9 8BB7

Reply to: