Shearching return of experience
-
I've 100mb/s of bandwidth …
-
Get good nics (like intel) and a board with a fast PCI-Bus. Depending on encryption needs if you plan to run IPSEC tunnels you need a more or less Powerful CPU. 1 GB Ram should be more than enough (however that depends on the packages that you want to run additional to the base install).
-
okey and you're sure that one own server can support 2500 users (Of which has little near 1000 at the same time) ??
-
I would think so unless you want to run additional packages on the firewall itself which might not be a good idea (depending on the package und usage).
-
I'm just using squid to redirect my lan trafic to another proxy
-
You can do this by a simple portforward. Squid is not neccessary for this.
-
maybe but I need squid access.log file to keep traces of my users navigation…
-
I would say that one server should be able to handle this load. Make sure to get a server with a 64bit pci, at least 1gb ram, possibly 2gb, and dual cpu's.
-
I would like to know if using multiple pfsense servers don't raise any problem??I think to this architecture like a potential solution because I need to separate the differents sites of my network with proper's dhcp range…
-
Use one system for everything and add a failoversystem if needed. You can setup individual DHCPs for each interface and seperate networks by firewallrules where needed.