The last part, the flexibility, really appeals to me as I like to tinker and try things, or write my own programs/scripts to do this or that (e.g., I parse my logs for VPN connections and grab the GeoIP and send myself a message) and there's nothing special about doing development for a generic OS like CentOS (or whatever your favorite Linux distro might be).
#DIY UNTANGLE FIREWALL BUILD SOFTWARE#
I like CentOS because it is generic, super stable, has very long support cycle, and if I want to add any software on it, it's easy to find packages from the many repos, or setup a CentOS VM to compile/build whatever tools I want to put on the firewall/router and then just upload it. I've tried other network router/firewall dedicated OSes and they are all fine, each with their pros/cons. i'm very comfortable on the Linux CLI, so it's very easy for me to setup what i need, no GUI is all the better for me as I really don't like web servers running on a network appliance connected to the internet. the system is dead quiet and hidden under one of my desks in the home office.
#DIY UNTANGLE FIREWALL BUILD DOWNLOAD#
i have policy routing to manage traffic between my 2 internet connections and I can download Windows or Linux distributions at near 1Gbps from the internet and system is mostly idle. i just threw a very stable CentOS7 on it and between netfilter and all the other open source tools available, I'm routing between my 2 internet connections (1x cable modem, 1x gigabit internet fiber), a wireless zone, a dmz zone to my publicly accessible servers, and my internal private network. this doesn't have AES-NI and frankly, I don't need it I can run half a dozen VPN connections and the CPU is hardly working - I think AES-NI would be great if you need to do more VPN stuff, but that's not my case. I got myself a cheap N2930 based system that draws like <20W, 8GB RAM, a 512GB SSD for caching and other stuff, and a 32GB USB drive for booting OS. this is only if you're really comfortable with Linux and you mention you have Linux computers i've been using Linux OSes as network appliances for over a decade so this is what i'm comfortable with and chose to do. I know I'm not doing what most people are doing, but that's why I thought I would throw the option out there.
0 kommentar(er)
