anyone familiar with the Juniper SRX1500? interested in how it would go on a 10GBps internet connection assuming i didn't want to do any fancy intrusion detection stuff - specs say "9gbps of firewall performance"
it can act as a switch too can't it?
anyone familiar with the Juniper SRX1500? interested in how it would go on a 10GBps internet connection assuming i didn't want to do any fancy intrusion detection stuff - specs say "9gbps of firewall performance"
it can act as a switch too can't it?
@decryption Meanwhile sitting here using a $80 ThinkCentre Tiny to route my 10 gbps connection ( ´・ω・`)
@kalleboo what ya running on there to do the routing & firewall stuff?
@decryption OpenWrt. I tried OpnSense and pfSense first but couldn’t get more than about 5 Gbps throughput. Replacing it with Linux and I have no trouble pushing 9 Gbps of IPv4 NAT traffic.
What it won’t do is 20 Gbps throughput (10G up and 10G down at the same time). I’m not sure if it’s due to the lack of PCIe lanes (tiny formfactor uses an 8x riser) or due to lacking CPU grunt (it’s an i3-8100T)
@kalleboo ahh good old openwrt
@decryption Mostly yes to both, with an answer that takes too long for this textbox.
@LapTop006 @decryption yup, very yes but* areas
* depending on which features you turn on or off from the default config
@jpm @LapTop006 hmm, which features have the most impact on performance?
@decryption @LapTop006 deep packet inspection is by far the worst offender
@jpm @LapTop006 tempted to get one, only $700 on eBay - I can’t even build an OPNsense box for the price of an SRX1500, not sure what the catch is? It seems to still get updates?
@decryption @LapTop006 the catch is the support contract required to obtain said updates