Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Firewall Wizards: RE: RE: High Speed Firewalls

RE: RE: High Speed Firewalls

From: David Newman <dnewman_at_networktest.com>
Date: Mon, 13 Mar 2000 20:05:45 -0500

>
> > Cars slow down when approaching and toll booth speed up going
> away from it,
> > and that affects their "throughput." Ditto packets traversing firewalls.
>
> Not if the acceleration lanes are wide enough: 20 lanes of
> traffic moving at
> 10 MPH has the same throughput as 5 lanes of traffic moving at 40 MPH.
> Similarly, a "full speed" firewall may need to have several NICs
> on each side.
> Parallelism solves many throughput problems, but rarely benefits latency
> (except for reduced queue length).

Eh? Here the analogy breaks. Regardless of the number of lanes, ALL the
cars/packets were going 65 mph before they hit the toll booth/firewall. You
need a hell of a lot of parallelism to make up for that.

dn
Received on Mar 21 2000

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]