Small site hardware that works with all packages *NOT SG-3100 - 21.05 *
-
All I can't pinpoint exactly whats wrong but the packages I am having trouble with on the SG-3100 in 21.05 with the patch applied are
suricata pfblockerng-devIt seems they both stop working without much of an error message other than stopped. Unfortunately my time for troubleshooting has come to an end. And I need to return this connection to production w/o things breaking every 2 or 3 days.
I would really like some insight into what the DEVs are using to test AND what is the recommended HW for small sites. 5100 seems like overkill but we need something that is going to be supported and not dropped after 3 or so years. Juniper/cisco make great firewall only routers, I was led to believe that the SG-3100 could do more than that. But it appears thats going away.
So in small sites what is the recommended HW that devs are testing for?
-
I asked in your other thread, but by "small site" what bandwidth and device count are you talking about? 50 Mbps will be a different answer than 1 Gbps, for instance a 2100 should be just fine at slower WAN speeds.
The 3100 came out in 2017 as I recall. I don't think Netgate is intentionally not supporting it, the issue is the various third-party packages and apparently even newer PHP versions have issues with its 32 bit ARM CPU...IOW the world has sort of moved on around it.
-
@steveits Probably bursting to 1GiG during overnight. That would be the 5100 correct?
-
Yeah, per https://www.netgate.com/products/appliances/ the "firewall" benchmark of the 2100 (with 10000 ACLs) is below that. (edit: without Suricata/Snort)
The 5100 is out of stock anyway, but if you're thinking about it check back in a few days.
-
Yeah, the 2100 won't get you to 1Gbps.
But see todays hardware announcement
:
https://www.netgate.com/blog/introducing-the-new-netgate-6100.htmlSteve
