Hey Michael,

We looked at http://www.mbx.com/ since they can custom build systems in 1U form 
factor and even make them look cool w/ graphics (if that is of interest).

Anyway, we spec'd out a decent box for around $1500 from them. Looking at about 
the same specs as you. What we needed was a strong box for IPSec, full 
redundancy and in a 1U.

They got us 4 NICS, mirrored (40GB) SATA hard drives (although anything over 
6MB is a waste) and even redundant power supplies.

You could go a step further and get a HiFN card to do the SSL work. Of course 
that is the very high end.

What I would recommend is one of these:

http://www.acrosser.com/firewall/product/9926.htm

if you dont need or want to waste the harddrives and power supplies and they 
are about 1/3 the price. They have 4 NICS (NatSemi's which are nice), compact 
flash and a mini-pci and extra PCI if you want to use an SSL excelerator card. 
Although they do claim 60 Mbps throughput with 3DES out of the box.

That should be more than enough to handle you needs.


Chet Harvey
Pitbull Technologies <http://www.pittech.com/> 
Protecting your Digital Assets
703.407.7311


Quoting Michael Gressick <mg at whitehousepost dot com>:

> Hello all,
> 
> We have four sites, each will soon have a 45mb/sec DS3 link.  I want to
> link each site to each other via IPSec. (Multiple-hub/spoke configuration,
> so each site will connect to the three others)
> 
> My question is, what kind of processing power will I need to push 45mb/sec
> through an IPSec'ed pipe to my other location? (while maintaining the
> other always-on connections)
> I imagine one of the Soekris boxs won't do it, so I'm lookin for some type
> of 1U solution.  We need the horsepower to push the traffic, the ability
> to have at least three, ideally four, interfaces, in as slim of a box as
> possible (1U). We're not above spending some $$$ on the server boxs, from
> say Dell or HP, so any suggestions?
> 
> Thanks
> Mike
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
> 
>