Home page logo

nanog logo nanog mailing list archives

Re: High Speed IP-Sec
From: Richard A Steenbergen <ras () e-gerbil net>
Date: Mon, 9 Jun 2003 19:09:42 -0400

On Mon, Jun 09, 2003 at 04:03:18PM -0400, Leo Bicknell wrote:

I'm looking for a high speed (300-1000Mbps) IPSec solution.  I need
basic functionality only, a frame in one side pops out the other
side.  For the moment I don't care if this is a layer 2 or a layer
3 device.  For the application in mind it's just between two points.

I need a supported product, not some home-grown set of bits, and
cost is the major factor.  Most units at this speed do a lot of
other stuff (firewall features, vpn clients, ids, other junk), and
cost a lot of money as a result.  Since there are FreeBSD/Linux
boxes getting close to that throughput with accelerator cards I
figure someone has to make the stripped down solution for a reasonable

Any pointers welcomed.


The PIC isn't exactly cheap, but it's pretty well supported, and the rest 
of the routers aren't too bad on the used market.

Richard A Steenbergen <ras () e-gerbil net>       http://www.e-gerbil.net/ras
GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]