On Mon, Nov 24, 2008 at 01:29:24PM -0800, James Peltier wrote: > Hi All, > > I'm looking at replacing a Cisco 6506 with an OpenBSD machine serving a > university network. The current Cisco setup is basically providing routing > and VLAN trunks to our HP ProCurve switches with some basic firewall > services. I'd like to look at replacing it with an OpenBSD based solution > but I am unsure as to whether OpenBSD is up to the task. > > Does anyone have any hard evidence that a high quality machine running > OpenBSD would be sufficent to replace such a unit? Anything I may want to > investigate further prior to pitching this to my manager. > > He's aware of the benefits to OpenBSD such as the multitude of features > available in the stock system, but is a bit worried that it will not be able > to keep up. We're only pushing about 50-60M during peak times and are only > providing services over a gigabit link between buildings so I think it will > be able to keep up. PPS and memory latency are the key issues to tackle I > think. > > Any hints, direction, or "yeah, I've done it here.." style cases are greatly > appreciated.
You've said yourself, pps is a major issue. Without knowing more about your traffic type it's hard to say yes or no. Quite a few users operate OpenBSD routers/firewalls in high-traffic situations, but each is different. -- Jason Dixon DixonGroup Consulting http://www.dixongroup.net/
