Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 26 replies
  • Subscribers 2 subscribers
  • Views 7719 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Trying to find hardware answers

scottd
I have a 10mb connection to the internet and approx.  3200 workstations.  I am seriously considering the Astaro product because it really appears that it will meet my needs.    The problem is I can't find and information on scaling when it comes to number of workstations.   We would obviously install Astaro on our own hardware.     We would use Firewall, Content Filter, NDS Authentication, Filtering using Groups,  Intrusion Detection,  AntiVirus/AntiSpyWare.

I've talked to people who are doing the same thing we want to do but on a smaller scale.   So im asking for help building a box.   

Is it even possible to run all this on one machine for 3200 clients?

Our current filter handles about 2.5 million requests a day and we do about 8mb of traffic to the internet at our peak time. 

I really need some help hope you guys and girls are it.  Thanks.

I should add that even though there are 3200 nodes they wont be connected at the same time.


This thread was automatically locked due to age.
Parents
  • 0
    Take a look at the data sheet:
    http://www.astaro.com/content/download/2437/18745/file/Datasheet_asg_overview_en_01032006.pdf

    There are some specs on the hardware appliances; the high-end models can handle 2000 concurrent users, 1,000,000 concurrent connections, ...

    You could buy one of those, or build something similar with a good dual Opteron or Xeon system, with lots of RAM.

    To be honest, with only a 10MBit connection, I don't think you'd need to worry too much.

    Barry
  • 0 in reply to BarryG
    scottd,

    my guess is that you will be better off with one of Astaro's hardware solutions.  If you look at how the Astaro software licenses: http://portal.knowledgebase.net/display/2n/kb/article.asp?aid=119934&n=1&s=1 your going to need a fairly large license in order to cover your IP's / sessions.

    When we did the math (but we have not purchased yet) we could get a pair of 220's + maintenance etc. for the price of a single software license.
  • 0 in reply to ffeingol
    As a reseller, I would probably have you eval the 425 or, more likely, the 5xx units.  THe hardware is robust, and guaranteed to remain compatible with Astaro throughout it's lifecycle... and should handle the load nicely.  Also, licensing costs are a factor, it's often cheaper for our customers to buy the appliance than use the software (with some exceptions).

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    Not to spark debate but I am working with a rep from Astaro and a Reseller and they haven't been able to completely clear this up for me.  I work for a K12 school district so license cost is greatly reduced and its cheaper for me to build my own box and license Astaro accordingly.  

    Dell is our prefered vendor so we are looking at the PowerEdge 2800 w/ Dual DualCore 2.8 Xeon w/8gb of RAM and (4) 72.3 15k drives RAID 5 w/Failover.  


    Does anyone know of an installation this large on a single box that I can talk to?
  • 0 in reply to ffeingol
    scottd,

    my guess is that you will be better off with one of Astaro's hardware solutions.  If you look at how the Astaro software licenses: http://portal.knowledgebase.net/display/2n/kb/article.asp?aid=119934&n=1&s=1 your going to need a fairly large license in order to cover your IP's / sessions.

    When we did the math (but we have not purchased yet) we could get a pair of 220's + maintenance etc. for the price of a single software license.


    Thanks for the reply but I cant get your link to work.
  • 0 in reply to scottd
    The only installations I've dealt with of that size are on Astaro Hardware.  I'd check out the HCL at http://www.astaro.com/kb  to make sure the RAID controller is on the list, and to make sure that your NICs are on that list (those are the most often-overlooked items... if they are not on the HCL, they probably will not work).  As far as raw "horsepower", that configuration sounds fine. Bear in mind that although ASL technically supports SMP, the SQUID proxy that it runs has performance issues when run on a SMP system.  I recommend you load it with the noSMP option.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    Incidentally, they have a fully tested Dell machine in that list, a 2850, that would probably suit your needs.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Reply Children
  • 0 in reply to BrucekConvergent
    The stupid KB won't let me link to it.  Here are the details: 


    ASL Protected IP's 	 Concurrent connection limit

     10 	                         32,000

     25 	                         64,000

     50 	                        128,000

     100 	                       256,000

     250 	                       512,000

     500 	                     1,024,000

     unlimited 	             unlimited


    In our case we needed a lot sessions so that bumped up the license cost.
  • 0 in reply to ffeingol
    Compare your needs to this:
    http://www.astaro.com/firewall_network_security/asg425

    It's just running a P4.   It does have the advantage of using the Sensory AV acceleration card, which I would recommend with that level of usage.  When we sell one, this is one of the bigger performance increases we see, in the AV scanning!  It might be possible to use a card like this on your hardware, Sensory does sell them on their site.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Cookie Information Banner