As always, the answer is "it depends." Variables of interest are:
MB of traffic
% in few, big sessions (FTP downloads)
% in many, small sessions (HTTP browsing)
% fragmented
% encrypted to how many other hosts
Encryption algorithm, key size, key negotiation method
services other than fwd (CVP, LDAP)
NAT, especially lots of static NAT
Number of rules in policy
order of rules in policy
Processor speed
Memory amount
Nic speed
Bus-mastering or not
You can also check www.checkpoint.com for results of a recent test they
did. I think it still ends with an "it depends" because the OS's weren't
tested on identical hardware and there was no discussion of policy or
traffic.
www.phoneboy.com has a lot of good information about memory usage per
connection which can help you size boxes.
--
Jack Coates, Rainfinity SE
t: 408-382-4860x m: 650-280-4376
On Thu, 3 Aug 2000, Rob Cryan wrote:
>
> Does anyone have statistics on the capacity of FW1 on NT (the lowest common
> denominator)?
>
> I have 1 MB (burst to 10 MB) pipe to the internet via exodus. I have no
> capacity issues today. I am trying to anticipate when additional firewalls
> might be needed for load balancing.
>
> Are there other stats besides raw MB of through put? Concurrent users
> hitting a web site or something like that?
>
> Thanks
>
>
> Rob Cryan
> Solutions Integration Manager
> infinitespace.com
> Two Westborough Business Park
> Westborough, MA 01581
> Office: 508.870.4714
>
>
> ================================================================================
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> ================================================================================
>
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
