OS for nat/routing server?

keylase2011-01-29 11:15:35

Shaping

keylase, 2011-01-29 11:15:35

Which OS to choose for nat+routing+shaper? Besides, where to read about configuring such a server? About 1.5 thousand users are planned. For now, I'm looking towards mikrotik. It was also advised to use freebsd, but there was no experience in configuring such a highly loaded one yet.
upd: Please advise high-quality articles on setting up a server of this magnitude.

Answer the question

In order to leave comments, you need to log in

12 answer(s)

equand, 2011-01-29
@equand

FreeBSD+ipfw+kernel_nat?
Sysctl is not that hard to configure with sysctl -d.
There are a lot of articles, especially how to set up rutting on bzdyah.

rtzra, 2011-01-29
@rtzra

There was a case on an ordinary office piece of iron once upon a time there was a gateway on an old Red Hat'ine. About 300 users, mail, squid + rezhik and much more. VPN up to three points (branches). Most of the time, the piece of iron was loaded by 2-5%.
The main thing is to take normal hardware, and Linux vs FreeBSD is not important - see for yourself what you like best.

pmb_it, 2011-10-12
@pmb_it

vyatta
or, as mentioned above, Mikrotik.

Denis, 2011-01-29
@uscr

If you plan to use “ordinary” pieces of iron (a regular PC, not a special piece of iron). The choice is obvious - FreeBSD. And there will be no problems with iron (if you don’t get into the exotic) and articles of the sea, incl. in Russian.

lexa0, 2011-01-29
@lexa0

Why is FreeBSD the most popular answer? Why is Linux worse? and nat and shaping it also has.

Fill, 2011-01-29
@Fill

1.5k subscribers in what capacity? PPPoE clients? IPOE?
what channel width do you plan?

Puma Thailand, 2011-01-29
@opium

centos + quagga + iptables + tc

Pavel K., 2011-01-29
@domain

FreeBSD+ipfw+kernel_nat
Elementary.
Still modern iron all-attacks.
Preferably em * network and driver from yandex.

Lev Lybin, 2011-01-29
@lybin

held a gateway on debian up to 100 people. iptables+iproute
manual littered the Internet, including almost everything is on opennet.ru

Dmitry, 2011-01-29
@plin2s

www.cyberdogtech.com/firewalls/www.thg.ru/network/ipcop/index.html
_

Vladislav, 2011-01-30
@click0

Mikrotik can be used for simple tasks.
When it is necessary to make a non-trivial decision, then many questions immediately arise for the developers of this good.
I'm for Freebsd+mpd5+ipfw|pf+quagga(BGP|OSPF)

0Lexx0, 2011-10-12
@0Lexx0

Use the distribution you know. As I understand it, for 1.5k users, you also need HA - look towards CARP / uCARP. I used freebsd + pf + pfsync + dummynet for similar purposes.
PS Mikrotik is not needed.
PPS I'm surprised why people advise quad (maybe they just googled that there is such a product for dynamic routing)