Suggestions for a network appliance PC.

[lafrad]

I have been given the task of putting together a "network appliance" PC/Server that will be used as a Firewall/Proxy for our company (both internal employees and customers will be using these boxes... similar to a personal hardware "firewall"). It has no need to be fast, but a REQUIREMENT is uptime. It MUST be a stable machine. ALSO there will be 2 forms: Rack mounted, and Standalone. Rack mounting is preferable to be 1U, but 2U is possible, to keep costs down (if it works like that).

Example specs:
1-2 Ghz, (really not important, as it is really just a "customized" proxy server)
1-2 gig ram,
10-20 gig hard drive (it is used for the OS only)
gigabit over copper network
Linux compatible (Looking to use Fedora as the OS on this system)

This needs to be an "inexpensive" box, as the processor level shows.
Again, it MUST be reliable. that is really the only stipulation.

Anyone with suggestions on hardware?

 

[Matthias99]

Opteron 140 in a rackmounted server chassis? Should be wicked reliable (registered ECC RAM), and they're $100 cheaper than the Xeon 2.4.

proc
MB (with dual GBE!)
RAM (or four of these?)
chassis (I *think* this will fit that MB; otherwise, there are many 2U rackmount cases to choose from)
hard drive w/ 3-year warranty

That's about as cheap as a reliable server gets.

 

[lafrad]

Ok, so it looks like I need to possibly come up with something a little less reliable ;-)
I will present this $1K box, (the Tyan isn't in stock.. gotta find something else...)
Looks like the memory for the Opteron is going to be killer......

 

[Matthias99]

Originally posted by: lafrad
Ok, so it looks like I need to possibly come up with something a little less reliable ;-)
I will present this $1K box, (the Tyan isn't in stock.. gotta find something else...)
Looks like the memory for the Opteron is going to be killer......

Inexpensive, high-performance, reliable. Pick two. 😛

You can get a *lot* cheaper if you use 'desktop' parts, but most of what you pay for with 'server' hardware is reliability. You could look for last-generation server parts -- maybe an Athlon MP-based system? Those would be a lot slower, but cheaper.

All memory is pretty expensive now, but yes, registered ECC is the most expensive. You said you needed 1-2GB -- I guess you could find some PC2100 or PC2700, although you'd be crippling performance. Why do you need so much RAM if it's just a firewall/router?

 

[lafrad]

The box is going to be used as a "protocol translation device". It will be recieving large streams (20-200 mbyte total) simultaneously on one type of connection (TCP), and then transmitting this stream via a secure, custom protocol (UDP based to combat the high latency of an intercontinental link). At times, there could be LARGE amounts of data in memory, waiting to be tossed out over the WAN connection. Ram is a BIG thing in this case. Processor, is not. (We can saturate a 100Mbit link with a 1.3 ghz notbook computer, with plenty of room to spare).

The "last gen" parts are definately a possiblity... but are starting to get scarce. if this particular setup is successful, we might be building 100's of these.. (which is in our favor, as volume pricing helps a lot.)

I do realize that the whole "pick two" approach is there, I suppose it is just *how much* we want to emphasize each of the options. I am thinking I might price out a "workstation" class computer along these lines. Something better than a PC, but not quite "server" class.....

Keep coming with the suggestions though, every little bit helps 🙂

 

[Wahsapa]

something like this http://slashdot.org/article.pl?sid=04/06/07/0413209&mode=thread&tid=137&tid=193

what kind of things will this machine be doing and for HOW many people, over 15, your gonna need serious stuff and prolly should look into professional solutions because if its a business and you need it to be reliable and your serving a thousand employes and clients then look into spending a lot of money.

BUT if you need a basic firewall/proxy for a handfull of peopple to use at a time the Via EPIA mini-itx motherboards might be the option for you.

a firewall needing a 2ghz cpu and 2 gigs of ram is one serious firewall(ment for serious users)

 

[AWhackWhiteBoy]

Originally posted by: Wahsapa
something like this http://slashdot.org/article.pl?sid=04/06/07/0413209&mode=thread&tid=137&tid=193

what kind of things will this machine be doing and for HOW many people, over 15, your gonna need serious stuff and prolly should look into professional solutions because if its a business and you need it to be reliable and your serving a thousand employes and clients then look into spending a lot of money.

BUT if you need a basic firewall/proxy for a handfull of peopple to use at a time the Via EPIA mini-itx motherboards might be the option for you.

a firewall needing a 2ghz cpu and 2 gigs of ram is one serious firewall(ment for serious users)

did you even read the thread?

 

[AWhackWhiteBoy]

your not going to get much of a server for a price tag of $1000, nevermind with 2gigs of ram. you'll probably have to settle for a cheap dell server with a slow Pentium 4 and cheap DDR266 ram.

 

[Wahsapa]

maybe an old dual amd xp athlon board with gigabit eithernet then?

865's with csa gigabit, a northwood, 2x512 ram is what i would be looking at if i were you then(a 100 of them? wow)

 

[AWhackWhiteBoy]

MSI 6501-030 K7D MASTER-L - $220
Viking 512megs ram - $88 x 4 = $352
AMD Athlon MP 2400+ $120 x 2 = $240

thats $812 total, just find a hard drive and case to put all that stuff in. godspeed.

 

[mikecel79]

If your looking for reliability I woud seriously start looking at servers with redundancy then. Redundant, fans, PSU and disks. This sounds like it would be a business critical application and I wouldn't want to explain to the boss that customers can't get in because a PSU died in proxy/firewall.

I would be looking at Dell/IBM/HP/Compaq 1U servers with redundant PSUs. While more expensive it's worth it for the extra reliability.