Untangle for 1600+ users

gliverman · 11-02-2007, 12:10 PM

What hardware do you all think I would need? This box sits between the firewall and core switch protecting 1600+ users with all the opens source modules except for OpenVPN & Firewall. Routing is installed to make some static routes but does not do DHCP or NAT. We will be logging almost EVERYTHING.

Thanks!

gotkimchi · 11-02-2007, 12:16 PM

What is your WAN connection? When you say 1600+, how many at the same time? Also, are you planning on using the SPAM blocker module, if so, what is your typical email numbers?

Untangle might not be your best solution, pending on your answers to these questions. If you have a really beefy box, something like justinault's box, it might work.
http://forums.untangle.com/hardware/748-fastest-hardware-i-can-run-untangle-today.html

gliverman · 11-02-2007, 12:34 PM

This box is at the county office of a school system. The box will sit between the firewall and core switch. On the public side there is a 9 meg connection via 6 T1's. On the private side there is a WAN connected to the core switch that provides a gig connection to the schools. As I said, it is only a 9 meg internet connection now. As for email numbers... I am not sure but will check. A large percent will be on at all times, though not all going to the internet... a lot of the traffic will stay internal.

Does that answer your questions? I have a 1.5 gig P4 Dell GX400 with 512 ram and 40GB IDE hard drive now that can do only the web filtering without choking... I know this is too small.

gotkimchi · 11-02-2007, 12:45 PM

From your statement above, looks like the Untangle will be in a bridgemode, passing the traffic to your firewall. Only concern I have is the SPAM numbers. If you have an exchange, I suggest doing this to keep your bogus emails out of your exchange.
http://forums.untangle.com/tip-day/68-advanced-untangle-tip-day-spam-recipient-filtering-exchange-2003-a.html

gotkimchi · 11-02-2007, 12:46 PM

also, does every student have an email address from the school? Or only the staff and faculty members.

juank · 11-02-2007, 01:07 PM

Hey Gliverman,

I will say this: For that number of users, I'll build a better box. But, you know what, why don't you give it a try:

. Put your Untangle box in the middle in Bridge mode
. Leave it there for 2-3 days, just passing traffic, no module installed at all and check performance. If you want to see live/graphic performance, install gkrlem,
. The start installing modules, one by one, one every 2 or 3 days and see how it affects your system.

By the way, if you want, send me a PM, I'm curious where do you work. I work for a State College.

gliverman · 11-02-2007, 01:27 PM

Quote:

Originally Posted by gotkimchi

also, does every student have an email address from the school? Or only the staff and faculty members.

No student email addresses

gliverman · 11-02-2007, 01:42 PM

Quote:

Originally Posted by juank

Hey Gliverman,

I will say this: For that number of users, I'll build a better box. But, you know what, why don't you give it a try:

. Put your Untangle box in the middle in Bridge mode
. Leave it there for 2-3 days, just passing traffic, no module installed at all and check performance. If you want to see live/graphic performance, install gkrlem,
. The start installing modules, one by one, one every 2 or 3 days and see how it affects your system.

By the way, if you want, send me a PM, I'm curious where do you work. I work for a State College.

Question time...

I have used Linux before but am not sure on this distro how to install stuff... please advise on how to install gkrlem. I also would like to install nano since I do not use vi.

We actually have the GX400 in bridge mode now running only web filtering.

gliverman · 11-02-2007, 01:45 PM

Quote:

Originally Posted by gotkimchi

From your statement above, looks like the Untangle will be in a bridgemode, passing the traffic to your firewall. Only concern I have is the SPAM numbers. If you have an exchange, I suggest doing this to keep your bogus emails out of your exchange.
http://forums.untangle.com/showthread.php?t=68

We could eliminate spam filtering if needed, but I do not want to. They have a Barracuda filtering spam now.

gotkimchi · 11-02-2007, 03:53 PM

SPAM and the IPS module uses the most resources. Since you might offload these services, I am leaning towards supported configuration. You still might need to have at min. 1GB of RAM.

11-02-2007, 12:10 PM	#1 (permalink)
gliverman Master Untangler Join Date: Nov 2007 Location: Carrollton, GA URLs submitted: 4 Posts: 146	Untangle for 1600+ users What hardware do you all think I would need? This box sits between the firewall and core switch protecting 1600+ users with all the opens source modules except for OpenVPN & Firewall. Routing is installed to make some static routes but does not do DHCP or NAT. We will be logging almost EVERYTHING. Thanks! Last edited by gliverman; 11-02-2007 at 12:19 PM..

11-02-2007, 12:16 PM	#2 (permalink)
gotkimchi Administrator Join Date: Jan 2007 Location: Bay Area Posts: 1,751	What is your WAN connection? When you say 1600+, how many at the same time? Also, are you planning on using the SPAM blocker module, if so, what is your typical email numbers? Untangle might not be your best solution, pending on your answers to these questions. If you have a really beefy box, something like justinault's box, it might work. http://forums.untangle.com/hardware/748-fastest-hardware-i-can-run-untangle-today.html __________________ to be understood, you must first understand.

11-02-2007, 12:45 PM	#4 (permalink)
gotkimchi Administrator Join Date: Jan 2007 Location: Bay Area Posts: 1,751	From your statement above, looks like the Untangle will be in a bridgemode, passing the traffic to your firewall. Only concern I have is the SPAM numbers. If you have an exchange, I suggest doing this to keep your bogus emails out of your exchange. http://forums.untangle.com/tip-day/68-advanced-untangle-tip-day-spam-recipient-filtering-exchange-2003-a.html __________________ to be understood, you must first understand.

11-02-2007, 12:46 PM	#5 (permalink)
gotkimchi Administrator Join Date: Jan 2007 Location: Bay Area Posts: 1,751	also, does every student have an email address from the school? Or only the staff and faculty members. __________________ to be understood, you must first understand.

11-02-2007, 01:07 PM	#6 (permalink)
juank Join Date: Aug 2007 Location: Athens URLs submitted: 40 Posts: 1,436	Hey Gliverman, I will say this: For that number of users, I'll build a better box. But, you know what, why don't you give it a try: . Put your Untangle box in the middle in Bridge mode . Leave it there for 2-3 days, just passing traffic, no module installed at all and check performance. If you want to see live/graphic performance, install gkrlem, . The start installing modules, one by one, one every 2 or 3 days and see how it affects your system. By the way, if you want, send me a PM, I'm curious where do you work. I work for a State College. __________________ -------------------------------- Juan Machado -------------------------------- PLEASE Help me voting on this Feature Request : Quota based web usage for users http://bugzilla.untangle.com/show_bug.cgi?id=3475

11-02-2007, 12:34 PM	#3 (permalink)
gliverman Master Untangler Join Date: Nov 2007 Location: Carrollton, GA URLs submitted: 4 Posts: 146	This box is at the county office of a school system. The box will sit between the firewall and core switch. On the public side there is a 9 meg connection via 6 T1's. On the private side there is a WAN connected to the core switch that provides a gig connection to the schools. As I said, it is only a 9 meg internet connection now. As for email numbers... I am not sure but will check. A large percent will be on at all times, though not all going to the internet... a lot of the traffic will stay internal. Does that answer your questions? I have a 1.5 gig P4 Dell GX400 with 512 ram and 40GB IDE hard drive now that can do only the web filtering without choking... I know this is too small.

11-02-2007, 03:53 PM	#10 (permalink)
gotkimchi Administrator Join Date: Jan 2007 Location: Bay Area Posts: 1,751	SPAM and the IPS module uses the most resources. Since you might offload these services, I am leaning towards supported configuration. You still might need to have at min. 1GB of RAM. __________________ to be understood, you must first understand.