Re: pf on a p90

["Martin Reindl" <martin-reindl@gmx.net>]

Yes. I have a old p100 with only 16 megs of RAM and a LAN at home with 7
PCs and servers.
Work's great for me, maybe i will stick in additional RAM when i get my
10Mbit line.

>
> Great what's the latency added, how does it do at saturation
> levels?    How many concurrent connections can it handle before
> latency goes up?
>
> "It's been rock-solid" may be ok for home users, but when
> a lot of folks hitting the web (4-8 concurrent connections per
> click with a 3 minute TCP in TIME_WAIT), that feeling may evaporate.
>
>
> Quoting OpenBSD baby (bsd@hitmedia.com):
> > > I found a p90 W/90megs of ram and was wondering if this
> would be enough
> > > oomph for a pf firewall that would be responsible for
> connecting my home
> > > lan to the internet via a T1
> >
> > Definitely!
> > The firewall for my whole office with 20 PCs or so on a T1 is a
> > p90 with 32 megs of RAM.  OpenBSD 2.9, now 3.1, running
> > previously ipfilter, now pf.
> > It's been rock-solid.
> > Helps to turn all the "YES" to "NO" in /etc/rc.conf, turn off inetd
> > and sendmail and all those things you don't need.  Described here:
> > http://geodsoft.com/howto/harden/