VPN experts !!! Please come to butthead... huh huh

[Vegito]

I read an article a while back on using W2K machines on VPN vs other VPN like netscreen and sonicwalls and cisco boxes..

Anyway they say something about W2K is sluggish because it's using all the bandwidth for compression or it's just wasting it, and the throughput is bad.. is that true or is there something else that makes it slow ? Also what are those VPN accelerators ?

 

[Tallgeese]

W2K VPN is S...L...O...W...
Especially as load ramps up.
Dedicated hardware is the way to go with this type of stuff.

HTH

 

[Garion]

The compression and encryption of the packets takes a lot of CPU power and has a lot of overhead. Appliances are generall specially designed to do this, NT has far more overhead. Security is a biggie too - Do you really want to expose your NT server to the Internet?

- G

 

[Acetate]

get a CISCO layer 2/3 switch, best combo available.

 

[n0cmonkey]

How do you all feel about hardware crypto accelerators? Like the HIFN chips and whatnot? I know they are used in several products out there and was considering getting one (complete with OpenBSD drivers!) since I can find some at decent prices. Not that I do vpn stuff, but it may (dunno for sure, have to check drivers) help with ssh stuff.