[ previous ] [ next ] [ threads ]
 From:  "Dan MacMillan" <danm at emerald dash associates dot com>
 To:  <m0n0wall at lists dot m0n0 dot ch>
 Subject:  Hardware Recommendation for monowall to monowall IPSec VPN.
 Date:  Fri, 4 Nov 2005 17:26:19 -0700

I've looked at the archives trying to find an answer to my question, but most people interested in
performance seem to be asking, "How fast can I make hardware X go", where what I really want to know
is, "What hardware do I need to go speed X".

My company has three offices.  About 10 people here in Calgary, 5 each in Toronto and Montreal.  All
of our servers are here in Calgary.  Currently the remote users connect to a terminal server machine
on this network to do their work.  We would like to establish VPN connections instead, one between
Calgary and Montreal, and one between Calgary and Toronto.

We like monowall because it is flexible and configurable and, unlike our old Netscreen-5, doesn't
have built-in stupidity that makes us pull our hair out all the time.  I set up a monowall to
monowall test IPSec VPN between my house and the office and it was simple and functional ( a one
evening project ).  Another employee here spent days trying, unsuccessfully, to establish a VPN
using our old hardware.

Our principal concern is with IPSec VPN throughput.  Is it realistic to expect to be able to
saturate a 10 Mbit link with VPN traffic using standard PC hardware?  With, for example, the "B2"
pre-installed monowall machine at logicsupply.com?  Or, put another way ... what hardware would you
recommend to be able to sustain 10 Mbit VPN traffic?

Dan MacMillan
Integration Specialist
Emerald Associates, Inc.
(403) 686-8930
danm at emerald dash associates dot com