Re: 10mbit fiber to home; NAT router can't fill pipe
Available news archives: comp.lang.tcl - comp.lang.python - comp.security.firewalls - sci.crypt - comp.lang.php - comp.lang.javascript
Google
 
Web news.hping.org


comp.security.firewalls archive

Re: 10mbit fiber to home; NAT router can't fill pipe

From: Somebody. <somebody.@nospam.russdoucet.com>
Date: Sun Mar 12 2006 - 20:06:20 CET

"Steve" <steve.follmer@gmail.com> wrote in message
news:1142141180.227876.248720@u72g2000cwu.googlegroups.com...
> You may like to guess where I live; I just got 10 mbit fiber to my home
> for $43/month. The first thing I noticed was that eMule quickly
> overwhelmed my SMC 2804 WBRP-G router and it hung because of too many
> connections. A good workaround was to put my p2p machine into the DMZ
> (and also erase the mappings to it). But problems remain.
>
> If I plug my cable directly into the fiber box, I can get a full
> megaBYTE/sec upload. But when I run in through the SMC router, it seems
> to max out at about 40-60% of that. Most of these NAT routers only have
> a 10baseT plug on the WAN port, so clearly they're not even designed to
> handle 10mbit and up. And most countries don't offer anything faster
> than a megabit or two.
>
> Can someone recommend an industrial strength NAT router that is fast
> enough to handle 10, 20 or 100mbits?

Indeed I would expect your SMC or similiar (D-link, linksys etc) device to
be overwhelmed by that sort of speed.

As long as you don't want to do antivirus at your gateway, any FortiGate
unit (even the lowly 50A) can handle your 10Mbps feed.

For a 20Mbps feed, I'd look at at least the FG60, again, with no Virus
Scanning at the gateway you'll be fine.

On a 100Mbps feed you should probably look at a FG200.

These recommendations are very, very ballpark, it depends what you want to
do (what protections you want) and the character of the traffic. If you
were just going to do NAT and port filtering/firewalling, even the 50A can
do 60Mbps by spec though I've never seen anyone try to run on that hard
before. You should consult a qualified local reseller for more specific
recommendations.

-Russ.
Received on Mon May 1 00:56:28 2006