[BlueOnyx:04824] Re: Firewall for Datacenter

[Christoph Schneeberger]

Hi,

I use identical setups for several class C sized networks and smaller
ones. I know you asked explicitly for a Linux firewall, but I still
would recommend OpenBSDs pf on a Soekris or pcengines Board, does pretty
fine for up to 50-70Mbps Uplinks. If you can handle iptables rules, pf
will be a breeze for you to work with.

Mikrotik/Routerboard can be a very good choice too and is perfectly able
to do what you want (depending on the model and rules up to
~500-600Mbps) and you probably can't buy anything for the price of them.
However I work for a company that sells them and so my view on them is
pretty biased ;)

Hth,
Christoph

Gerald Waugh wrote:
> Please excuse the crosspost
>
> We have a number of servers on a Class C network in a data center and
> would like to install a Linux firewall.
> TOPOLOGY AS BELOW.
>
> INTERNET
>   |
> ROUTER
>   |
> FIREWALL
>   |
> SWITCH
>   |
> SERVERS
>
> I have looked at using bridged firewall, as we do not need/want NAT.
> So far mixed results and can't seem to find one that includes a GUI.
>
>