Pretty sure a CCR routerboard would do IPSEC tunnels at 1Gbps. Maybe $500 version?
From: Af [mailto:af-boun...@afmug.com] On Behalf Of Mike Hammett Sent: Sunday, July 3, 2016 7:11 PM To: af@afmug.com Subject: Re: [AFMUG] VPN Appliance None of these are likely to provide the necessary encryption. I'm not sure that anything less than IPSEC would be sufficient. ----- Mike Hammett Intelligent Computing Solutions<http://www.ics-il.com/> [http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/ICSIL>[http://www.ics-il.com/images/googleicon.png]<https://plus.google.com/+IntelligentComputingSolutionsDeKalb>[http://www.ics-il.com/images/linkedinicon.png]<https://www.linkedin.com/company/intelligent-computing-solutions>[http://www.ics-il.com/images/twittericon.png]<https://twitter.com/ICSIL> Midwest Internet Exchange<http://www.midwest-ix.com/> [http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/mdwestix>[http://www.ics-il.com/images/linkedinicon.png]<https://www.linkedin.com/company/midwest-internet-exchange>[http://www.ics-il.com/images/twittericon.png]<https://twitter.com/mdwestix> The Brothers WISP<http://www.thebrotherswisp.com/> [http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/thebrotherswisp>[http://www.ics-il.com/images/youtubeicon.png] <https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg> ________________________________ From: "Bill Prince" <part15...@gmail.com<mailto:part15...@gmail.com>> To: af@afmug.com<mailto:af@afmug.com> Sent: Sunday, July 3, 2016 6:39:27 PM Subject: Re: [AFMUG] VPN Appliance A couple of x86 routers running Mikrotik L2TP between them? bp <part15sbs{at}gmail{dot}com> On 7/3/2016 4:08 PM, TJ Trout wrote: Any can't you use a CCR1009 with a EOIP, pptp, etc setup? On Sun, Jul 3, 2016 at 3:39 PM, Chuck McCown <ch...@wbmfg.com<mailto:ch...@wbmfg.com>> wrote: O*U*C*H OK, need cheap too during experimentation.... (Cheap, solid, high performance, flawless.... easy to find, right) Will take a look at UBNT. I don’t know much about their products. From: Rory Conaway<mailto:r...@triadwireless.net> Sent: Sunday, July 03, 2016 4:33 PM To: af@afmug.com<mailto:af@afmug.com> Subject: Re: [AFMUG] VPN Appliance The best tunneling device I’ve seen is Peplink. The catch being, you would need the 2500 to get 1Gbps but it will go up to 2Gbps and it’s not cheap, $15K on each side although I’m sure I could help you find a discount. Rock solid, we have run them for months without even touching them and years on the same firmware. To get the throughput you are looking for though, I’d consider Ubiquiti routers. That processor handles tunneling pretty easily. Rory From: Af [mailto:af-boun...@afmug.com<mailto:af-boun...@afmug.com>] On Behalf Of Chuck McCown Sent: Sunday, July 3, 2016 3:27 PM To: af@afmug.com<mailto:af@afmug.com> Subject: Re: [AFMUG] VPN Appliance Not really a firewall function. A tunneling appliance. Rock solid, low latency, high capacity. From: Craig Schmaderer<mailto:cr...@skywaveconnect.com> Sent: Sunday, July 03, 2016 3:05 PM To: af@afmug.com<mailto:af@afmug.com> Subject: Re: [AFMUG] VPN Appliance Chuck I'm not sure what exactly you want be pfsense is my favorite firewall. Very very stable. I have it on vms dell hardware or applience hardware rock solid for years. If you want something more name brand but expensive i still use cisco asas all the time but price for performance can be a lot. My friend is an engineer for F5 and they might have a solution that would work great but might get pricey. Craig Schmaderer Cell 402-380-1245<tel:402-380-1245> Skywave Wireless, Inc. On Sat, Jul 2, 2016 at 1:13 PM -0500, "Chuck McCown" <ch...@wbmfg.com<mailto:ch...@wbmfg.com>> wrote: I need a box. TV headend VLAN stream goes in. 1000 Mbps. Box encapsulates it and launches it on the public internet. At the far end, another box reverses the situation. Years ago I used Cisco PIX for this type of thing. Looking over pre-baked solutions I see lots of specs about number of users, or tunnels or sessions. I care about one single VLAN type of pipe, being wrapped up and unwrapped. Only. But performance has to be flawless. Robust. Plenty of CPU & Memory overhead. Recommendations?
