|
On Mon, Feb 11, 2002 at 01:46:51PM +0100, Henrik Rossner mentioned:
> we plan to substitute a commercial product with FreeS/WAN
> (www.freeswan.org) under Linux . As we expect high traffic rates
> (100MBit wirespeed, in the future even 5 times more) we thought about
> building a cluster. Using LVS seems to be a good choice.
> As the commercial product is very expensive, we can afford a number of
> quite nice Servers (we think about Dell Power Edge 1550, 1Gig Ram).
Your main bottleneck will be in the amount of data that your average CPU
can {de,en}crypt. Something like a 2Ghz chip should be able to encrypt a
little over a megabyte a second, with a good tail wind. You would be
better advised to use one box, with hardware FreeS/Wan acceleration
instead.
There was some rumours of Intel doing drivers for the secure versions of
the eepro100 chips (which I think some PowerEdges support), but they
certainly never released it. Checkout the FreeS/WAN website for more
details on what hardware is supported.
John
--
_______________________________________
John Looney Chief Scientist
a n t e f a c t o t: +353 1 8586004
www.antefacto.com f: +353 1 8586014
pgpfVFV2s4TdI.pgp
Description: PGP signature
|
