Joe, I could not find link to download free F5 VM, can you please send me the free F5 VM donwload link. Also can I use this in Oracle VM? Thanks, GV
From: Joseph Mack NA3T <jm...@wm7d.net> To: LinuxVirtualServer.org users mailing list. <lvs-users@linuxvirtualserver.org> Cc: "Robinson, Eric" <eric.robin...@psmnv.com> Sent: Thursday, October 6, 2011 8:27 PM Subject: Re: [lvs-users] [OT] High Performance Linux Firewall / VPN Device? On Wed, 17 Aug 2011, Robinson, Eric wrote: I remember you were talking about upgrading your Juniper gear if you couldn't find an open source solution. I assume you've already found your solution to this problem, but better late than never... I was at a computer bash tonight where I happened to be talking to the local F5 Field Systems Engineer. The F5 guy said that their VPN was cheaper than Juniper's for better performance (I have no idea myself, this is just FYI). Other things I didn't know about F5 o they run CentOS with their own F5 tcpip stack (they used to be FreeBSD but rewrote it for CentOS) o they have their own hardware (well Mobo anyhow, the FSE doesn't know if they have their own NICs). (Some other company who I've forgotten just used commodity hardware all around.) o you can download the F5 VM for free and run it in VMWare. You won't get the peformance you get on the F5 hardware, but you will get to test the management of it. o they reply route on the MAC address of the incoming packet, so the reply packet doesn't go through a routing table. The FSE says you don't get much performance if you're doing SSL offload in software on a standard CPU in something like OpenVPN. You need a hardware accelerator card to get anywhere. Joe >> openVPN Access Server is super easy to install and fairly >> easy to configure. >> >> I deployed it at work and it's been working quite well for >> us. However, we currently don't have more than about 10 >> people using it at the same time. >> > > We would have a couple thousand people using it, with hundreds of > tunnels. :-/ > > >> Since it's SSL, it's CPU bound. Just throw RAM and more CPU > > That shoots it down for us. We need IPSEC. :-( > > --Eric > > > > Disclaimer - August 17, 2011 > This email and any files transmitted with it are confidential and intended > solely for LinuxVirtualServer.org users mailing list.. If you are not the > named addressee you should not disseminate, distribute, copy or alter this > email. Any views or opinions presented in this email are solely those of the > author and might not represent those of Physicians' Managed Care or Physician > Select Management. Warning: Although Physicians' Managed Care or Physician > Select Management has taken reasonable precautions to ensure no viruses are > present in this email, the company cannot accept responsibility for any loss > or damage arising from the use of this email or attachments. > This disclaimer was added by Policy Patrol: http://www.policypatrol.com/ > > _______________________________________________ > Please read the documentation before posting - it's available at: > http://www.linuxvirtualserver.org/ > > LinuxVirtualServer.org mailing list - lvs-users@LinuxVirtualServer.org > Send requests to lvs-users-requ...@linuxvirtualserver.org > or go to http://lists.graemef.net/mailman/listinfo/lvs-users > -- Joseph Mack NA3T EME(B,D), FM05lw North Carolina jmack (at) wm7d (dot) net - azimuthal equidistant map generator at http://www.wm7d.net/azproj.shtml Homepage http://www.austintek.com/ It's GNU/Linux! _______________________________________________ Please read the documentation before posting - it's available at: http://www.linuxvirtualserver.org/ LinuxVirtualServer.org mailing list - lvs-users@LinuxVirtualServer.org Send requests to lvs-users-requ...@linuxvirtualserver.org or go to http://lists.graemef.net/mailman/listinfo/lvs-users _______________________________________________ Please read the documentation before posting - it's available at: http://www.linuxvirtualserver.org/ LinuxVirtualServer.org mailing list - lvs-users@LinuxVirtualServer.org Send requests to lvs-users-requ...@linuxvirtualserver.org or go to http://lists.graemef.net/mailman/listinfo/lvs-users