Re: pf on a p90

[Chuck Yerkes <chuck+obsd@snew.com>]

Great what's the latency added, how does it do at saturation
levels?    How many concurrent connections can it handle before
latency goes up?

"It's been rock-solid" may be ok for home users, but when
a lot of folks hitting the web (4-8 concurrent connections per
click with a 3 minute TCP in TIME_WAIT), that feeling may evaporate.


Quoting OpenBSD baby (bsd@hitmedia.com):
> > I found a p90 W/90megs of ram and was wondering if this would be enough
> > oomph for a pf firewall that would be responsible for connecting my home
> > lan to the internet via a T1
> 
> Definitely!
> The firewall for my whole office with 20 PCs or so on a T1 is a
> p90 with 32 megs of RAM.  OpenBSD 2.9, now 3.1, running
> previously ipfilter, now pf.
> It's been rock-solid.
> Helps to turn all the "YES" to "NO" in /etc/rc.conf, turn off inetd
> and sendmail and all those things you don't need.  Described here:
> http://geodsoft.com/howto/harden/