The Gate

The Gate [[Image:{{{picture}}}|200px]] What: New router for HSB with a lot of headroom. Tagline: Moving bits in and out, in bulk. Maintainer(s): User:Askarel, User:Wouter Archived:

[[People::User:Askarel, User:Wouter| ]]

What is it ?

Our core router/firewall, with some processing headroom.

Could we use an embedded platform like a WRT54G ?

The embedded platforms usually have very limited resources (low flash, low RAM, slow CPU) or have some missing hardware (RTC, USB, parallel/serial port). For example, In the case of the WRT54G, you need to choose between IPv6 tunnel and an OpenVPN platform. The device can't do both, you will need to stack several of those to reach your goal.

Furthermore, given the number of hosts we have during workshops, the embedded platform simply croaks under the load. Also, having a transparent proxy for HSB would be nice to speed things up for the visitors.

Services that currently run on the machine

• Internet gateway
• Pamela scanner
• PXE/Netboot machine (tftp)
• VPN endpoint (ipsec/openvpn)
• DHCP/NTP server
• OSPF node
• DNS relay
• Firewall

Soon:

• RADIUS server
• LDAP slave

Software part

This machine runs debian.

Subpages

The Gate/setup