Lowest spec processor that netfilter will run on

Lowest spec processor that netfilter will run on

[John Crowhurst]

This is a question that has been bugging me, what is the lowest spec
processor that netfilter can reliably run on?
I'm meaning non-x86 type processor.

Thanks in advance.

-- 
John

Re: Lowest spec processor that netfilter will run on

[Matthew Hellman]

I can't speak for non x86 processors, but I have mine running on a Pentium
60 mhz with 64MB ram....runs pretty well although I personally wouldn't
consider going with anything less.

Matt

----- Original Message -----
From: "John Crowhurst" <fyremoon@fyremoon.net>
To: <netfilter@lists.samba.org>
Sent: Thursday, June 06, 2002 6:47 PM
Subject: Lowest spec processor that netfilter will run on


> This is a question that has been bugging me, what is the lowest spec
> processor that netfilter can reliably run on?
> I'm meaning non-x86 type processor.
>
> Thanks in advance.
>
> --
> John
>
>
>

Re: Lowest spec processor that netfilter will run on

[Sandy Harris]

Matthew Hellman wrote:
> 
> I can't speak for non x86 processors, but I have mine running on a Pentium
> 60 mhz with 64MB ram....runs pretty well although I personally wouldn't
> consider going with anything less.

I ran a firewall for a year or two using a 486/66
with 24 megs, using ipchains, on a 2.2 Mbps ADSL
link. The only problem was keeping log size under
control on a 170 meg drive.

There are some numbers for related things at:
http://www.freeswan.org/freeswan_snaps/NEW-SNAP/doc/performance.html

Re: Lowest spec processor that netfilter will run on

[Matthew Hellman]

ipchains isn't iptables...and you were probably also running a much
different (older) kernel...so we're talking apples and oranges here. I'm not
saying it woudn't work mind you...it probably would.  I sure wouldn't
recommend it to anyone though and I personally wouldn't think of going with
anything less that a P60 and 64MB ram.  If that's all you've got lying
around though...it's worth a shot.

Matt

----- Original Message -----
From: "Sandy Harris" <sandy@storm.ca>
To: <netfilter@lists.samba.org>
Sent: Friday, June 07, 2002 1:11 AM
Subject: Re: Lowest spec processor that netfilter will run on


> Matthew Hellman wrote:
> >
> > I can't speak for non x86 processors, but I have mine running on a
Pentium
> > 60 mhz with 64MB ram....runs pretty well although I personally wouldn't
> > consider going with anything less.
>
> I ran a firewall for a year or two using a 486/66
> with 24 megs, using ipchains, on a 2.2 Mbps ADSL
> link. The only problem was keeping log size under
> control on a 170 meg drive.
>
> There are some numbers for related things at:
> http://www.freeswan.org/freeswan_snaps/NEW-SNAP/doc/performance.html
>

Re: Lowest spec processor that netfilter will run on

[George Georgalis]

are there some real statistics on what is needed?

I'm setting up a t-1 and 1/3 of a t-1 on a p166 64meg (Bering floppy), I
know that's enough for masq, but I want to fit mrtg and ToS (throttling)
in there too, so I'm not sure. I could scp (or mail?) the logs and make
graphs on a faster pc... what do you all recommend? 

// George

On Thu, Jun 06, 2002 at 10:45:49PM -0500, Matthew Hellman wrote:
>ipchains isn't iptables...and you were probably also running a much
>different (older) kernel...so we're talking apples and oranges here. I'm not
>saying it woudn't work mind you...it probably would.  I sure wouldn't
>recommend it to anyone though and I personally wouldn't think of going with
>anything less that a P60 and 64MB ram.  If that's all you've got lying
>around though...it's worth a shot.
>
>Matt
>
>----- Original Message -----
>From: "Sandy Harris" <sandy@storm.ca>
>To: <netfilter@lists.samba.org>
>Sent: Friday, June 07, 2002 1:11 AM
>Subject: Re: Lowest spec processor that netfilter will run on
>
>
>> Matthew Hellman wrote:
>> >
>> > I can't speak for non x86 processors, but I have mine running on a
>Pentium
>> > 60 mhz with 64MB ram....runs pretty well although I personally wouldn't
>> > consider going with anything less.
>>
>> I ran a firewall for a year or two using a 486/66
>> with 24 megs, using ipchains, on a 2.2 Mbps ADSL
>> link. The only problem was keeping log size under
>> control on a 170 meg drive.
>>
>> There are some numbers for related things at:
>> http://www.freeswan.org/freeswan_snaps/NEW-SNAP/doc/performance.html
>>
>
>
>

-- 
GEORGE GEORGALIS, System Admin/Architect    cell: 347-451-8229 
Security Services, Web, Mail,            mailto:george@galis.org 
File, Print, DB and DNS Servers.       http://www.galis.org/george 

RE: Lowest spec processor that netfilter will run on

[Stewart Thompson]

HI:

	I have set up iptables firewalls for several personal LAN's  with
anywhere from 2 to 10 computers on them.  Some were on ADSL  and
some were on ADSL.  I have used Pentium 100's with 48 MB of 72 pin
Ram to 486DX2-100 with 48 MB of 72 pin Ram,  and even a 486DX2-66
with 24 MB of RAM. The last one I have a web server running on it, and
is fire walling a real time video server. I have not seen any problems with
speed and response time as of yet. I think the biggest issue would be a
memory problem when a lot of connections are open at the same time.
I am sure there is someone on the list far more qualified to comment.


Stu.........



-----Original Message-----
From: netfilter-admin@lists.samba.org
[mailto:netfilter-admin@lists.samba.org]On Behalf Of Matthew Hellman
Sent: June 6, 2002 8:06 PM
To: fyremoon@fyremoon.net; netfilter@lists.samba.org
Subject: Re: Lowest spec processor that netfilter will run on

I can't speak for non x86 processors, but I have mine running on a Pentium
60 mhz with 64MB ram....runs pretty well although I personally wouldn't
consider going with anything less.

Matt

----- Original Message -----
From: "John Crowhurst" <fyremoon@fyremoon.net>
To: <netfilter@lists.samba.org>
Sent: Thursday, June 06, 2002 6:47 PM
Subject: Lowest spec processor that netfilter will run on


> This is a question that has been bugging me, what is the lowest spec
> processor that netfilter can reliably run on?
> I'm meaning non-x86 type processor.
>
> Thanks in advance.
>
> --
> John
>
>
>

RE: Lowest spec processor that netfilter will run on

[Stuart W. Card]

>----- Original Message -----
>From: "John Crowhurst" <fyremoon@fyremoon.net>
>To: <netfilter@lists.samba.org>
>Sent: Thursday, June 06, 2002 6:47 PM
>Subject: Lowest spec processor that netfilter will run on
>
> > This is a question that has been bugging me, what is the lowest spec
> > processor that netfilter can reliably run on?
> > I'm meaning non-x86 type processor.

We've done 16 mbps routing, with a bunch of special hardware related
processing, on 486SX-25s, so you can drop down pretty low on x86 CPUs,
RAM is more of an issue (and that depends upon how much you pare down
the kernel and daemons).

I think the question may really be, can you run on, for instance, a StrongARM,
with minimal RAM, and a little flash instead of a big hard drive? I'd sure 
like to
know, there are cool network devices that can be made affordable if so...

Stuart W. Card, Chief Scientist & Vice-President, Critical Technologies Inc.
Suite 400 Technology Center, 4th Floor 1001 Broad Street, Utica NY 13501
315-793-0248 x141  FAX -9710  <stu@critical.com>  http://www.critical.com