[ale] Router Recommendations?

[Chuck Payne]

I am using pfSense on a box I build with ipv6 turn on, I have to use
openSUSE update server appear to be mostly ipv6 and it seems to work great.
I need to learn more as I am not sure what else I can tell you.

On Fri, Feb 10, 2017 at 12:30 PM, Derek Atkins <derek at ihtfp.com> wrote:

> Thanks.  One user on Amazon did report getting 940Mbps on the pfSense box
> (although he used Ubuntu).  I just wanted to make sure there's enough
> power on there to do the routing I need without slowing me down..  It
> appears the CPU does not include AES-NI, which may affect IPsec
> performance?
>
> Also, can anyone confirm that pfSense will successfully policy-route IPv6?
>  I saw a complaint on the pfSense forums from 2012 but no follow-up on
> whether it had been resolved.
>
> -derek
>
> On Fri, February 10, 2017 12:14 pm, dev null zero two wrote:
> > pfsense. a quad core box can do all that and Snort on a gigabit
> connection
> > easily.
> >
> > Sent from my mobile. Please excuse the brevity, spelling, and
> punctuation.
> >
> > On Feb 10, 2017 12:05 PM, "Dustin Priest" <dustin.h.strickland at gmail.com
> >
> > wrote:
> >
> >> I'd go with the pfSense unit, personally, if for no other reason than I
> >> have experience with it and I know it will handle whatever I need it to
> >> do.
> >> No clue about the Edgerouter.
> >>
> >>
> >> On 2/10/2017 11:55 AM, Derek Atkins wrote:
> >>
> >>> Hi,
> >>>
> >>> I got my fiber upgrade installed the other day and it looks like my
> >>> poor
> >>> Mikrotik router just can't keep up.  When I connect my laptop directly
> >>> to my AT&T router speedtest.net gives me 500/950 (don't ask me why
> it's
> >>> only getting 500 down -- I plan to ask).  However, when I connect
> >>> through my Mikrotik I get limited to about 150-200 up/down.
> >>>
> >>> So I'm looking to replace the Mikrotik, but looking for suggestions.
> >>> The two options I'm considering at the moment are a Ubiquiti Edgerouter
> >>> Pro 8 [0] for $316, or pfSense installed on a 4x1Gb quad-core
> >>> celeron[1]
> >>> with 8G RAM and 64G mSATA SSD for $310.
> >>>
> >>> My requirements:
> >>>
> >>> 1) sustained 1Gbps throughput, even via NAT, tunnels, or other routing
> >>> 2) GRE tunnel support (used to tunnel my class-C network)
> >>> 3) IPIP (protocol 41) tunnel support (used for HE's IPv6 tunnelbroker)
> >>> 4) Some VPN solution (IPsec/OpenVPN/PPTP, for when I travel)
> >>> 5) IPv4 policy based routing so I can route my class-C over the GRE
> >>>     tunnel and my RC1918 network via NAT (I'm pretty sure everything
> >>>     does this)
> >>> 6) IPv6 policy based routing so I can have some machines on the IPv6
> >>>     tunnel and other hosts on an ISP-supplied IPv6 network and ensure
> >>>     packets get routed out the correct method.  (my mikrotik doesn't
> >>>     support this!)
> >>> 7) Multiple IPs (both v4 and v6) on an interface (I run both my class-C
> >>>     and RFC1918 networks on the same LAN)
> >>>
> >>> What do you all think about these options?  Which would be more likely
> >>> to support my requirements?
> >>>
> >>> Thanks!
> >>>
> >>> -derek
> >>>
> >>> [0] https://www.amazon.com/Ubiquiti-Networks-Edgerouter-Router-
> >>> ERPro-8/dp/B00IA5J8M8/ref=sr_1_1?s=pc&ie=UTF8&qid=148674190
> >>> 9&sr=1-1&keywords=edgerouter+pro
> >>> [1] https://www.amazon.com/dp/B01MEGSMRZ?psc=1
> >>>
> >>
> >> _______________________________________________
> >> Ale mailing list
> >> Ale at ale.org
> >> http://mail.ale.org/mailman/listinfo/ale
> >> See JOBS, ANNOUNCE and SCHOOLS lists at
> >> http://mail.ale.org/mailman/listinfo
> >>
> > _______________________________________________
> > Ale mailing list
> > Ale at ale.org
> > http://mail.ale.org/mailman/listinfo/ale
> > See JOBS, ANNOUNCE and SCHOOLS lists at
> > http://mail.ale.org/mailman/listinfo
> >
>
>
> --
>        Derek Atkins                 617-623-3745
>        derek at ihtfp.com             www.ihtfp.com
>        Computer and Internet Security Consultant
>
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo
>



-- 
Terror PUP a.k.a
Chuck "PUP" Payne
-----------------------------------------
Discover it! Enjoy it! Share it! openSUSE Linux.
-----------------------------------------
openSUSE -- Terrorpup
openSUSE Ambassador/openSUSE Member
skype,twiiter,identica,friendfeed -- terrorpup
freenode(irc) --terrorpup/lupinstein
Register Linux Userid: 155363

Have you tried SUSE Studio? Need to create a Live CD,  an app you want to
package and distribute , or create your own linux distro. Give SUSE Studio
a try.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.ale.org/pipermail/ale/attachments/20170210/d13d8f68/attachment.html>