Hi there I am in the process of setting up a production Asterisk server, which will mainly be used for meetme conferencing. I am considering running a firewall, but wondering whether this will slow Asterisk down if all packets are being scanned. Any ideas? Many thanks Steven Langley -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20050810/b537ba3a/attachment.htm
Storm D. J. Petersen
2005-Aug-10 05:19 UTC
[Asterisk-Users] will a firewall slow down asterisk?
Any network device (ie: switch, router, firewall) will add a small amount of latency. To test the latency your firewall adds, you could simply try to do a ping www.google.com, directly in front and behind the firewall, and look at the ms response times. Cheers, S. ________________________________________ From: asterisk-users-bounces@lists.digium.com [mailto:asterisk-users-bounces@lists.digium.com] On Behalf Of Steven Langley Sent: Wednesday, August 10, 2005 2:12 AM To: asterisk-users@lists.digium.com Subject: [Asterisk-Users] will a firewall slow down asterisk? Hi there I am in the process of setting up a production Asterisk server, which will mainly be used for meetme conferencing. I am considering running a firewall, but wondering whether this will slow Asterisk down if all packets are being scanned. Any ideas? Many thanks Steven Langley
Technically, yes it will. The question should really be "is the latency tolerable?" I run (as do many folks here) mine from behind a Linksys firewall at home and I find the latency increase to be acceptable. I use Broadvoice as a provider and have 3 other extensions connected to it from remote locations (2 in the UK and one in Canada) all behind their firewalls. Professionally I run one that sits behind a Checkpoint FW1 NG firewall running on a Sun box and it too is acceptable. Mark Steven Langley wrote:> Hi there > > > > I am in the process of setting up a production Asterisk server, which > will mainly be used for meetme conferencing. I am considering running a > firewall, but wondering whether this will slow Asterisk down if all > packets are being scanned. Any ideas? > > > > Many thanks > > > > Steven Langley > > > > > ------------------------------------------------------------------------ > > _______________________________________________ > Asterisk-Users mailing list > Asterisk-Users@lists.digium.com > http://lists.digium.com/mailman/listinfo/asterisk-users > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users-- Mark, G7LTT/KC2ENI Randolph, NJ http://www.g7ltt.com
That should not be a problem. My users conference using a voip line from an ITSP so at any time there may be 4-8 calls passing over the firewall and terminating in the MeetMe conference. It works great. I would recommend Pix BTW. Linksys would be my next rec. But hey, they are both Cisco now... 8) Cheers, W ________________________________ From: asterisk-users-bounces@lists.digium.com [mailto:asterisk-users-bounces@lists.digium.com] On Behalf Of Steven Langley Sent: Wednesday, August 10, 2005 2:12 AM To: asterisk-users@lists.digium.com Subject: [Asterisk-Users] will a firewall slow down asterisk? Hi there I am in the process of setting up a production Asterisk server, which will mainly be used for meetme conferencing. I am considering running a firewall, but wondering whether this will slow Asterisk down if all packets are being scanned. Any ideas? Many thanks Steven Langley -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20050810/6227e1c4/attachment.htm
mgraves@mstvp.com
2005-Aug-10 09:57 UTC
[Asterisk-Users] will a firewall slow down asterisk?
> -------- Original Message -------- > Subject: RE: [Asterisk-Users] will a firewall slow down asterisk? > From: "Wiley Siler" <wsiler@education2020.com> > Date: Wed, August 10, 2005 11:04 am > To: "Asterisk Users Mailing List - Non-Commercial Discussion" > <asterisk-users@lists.digium.com> > > > That should not be a problem. My users conference using a voip line from an ITSP so at any time there may be 4-8 calls passing over the firewall and terminating in the MeetMe conference. It works great. I would recommend Pix BTW. Linksys would be my next rec. But hey, they are both Cisco now... 8) >I recommend m0n0wall (http://m0n0.ch/wall/) which is a NetBSD based firewall that includes traffic shaping. Easily managed via a web interface. Runs on any decent PC with 2 or more NICs. Also on Soekris or WRAP embedded platforms. Michael Graves Sr Product Specialist Pixel Power Inc mgraves@pixelpower.com o(713) 861-4005 o(800) 905-6412 f(713) 864-8668 c(713) 201-1262
> I recommend m0n0wall (http://m0n0.ch/wall/) which is a NetBSD based > firewall that includes traffic shaping. Easily managed via a web > interface. Runs on any decent PC with 2 or more NICs. Also on Soekris > or WRAP embedded platforms.I recommend IpCop www.ipcop.org
Jonathan k. Creasy
2005-Aug-11 06:31 UTC
[Asterisk-Users] will a firewall slow down asterisk?
There is pfSense (based on monowall) which I like also. www.pfsense.com -Jonathan -----Original Message----- From: asterisk-users-bounces@lists.digium.com [mailto:asterisk-users-bounces@lists.digium.com] On Behalf Of Alex Sent: Wednesday, August 10, 2005 11:52 PM To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: Re: [Asterisk-Users] will a firewall slow down asterisk?> I recommend m0n0wall (http://m0n0.ch/wall/) which is a NetBSD based > firewall that includes traffic shaping. Easily managed via a web > interface. Runs on any decent PC with 2 or more NICs. Also on Soekris > or WRAP embedded platforms.I recommend IpCop www.ipcop.org _______________________________________________ Asterisk-Users mailing list Asterisk-Users@lists.digium.com http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users