RE: Heavy Load on Firewalls

From: Jules Veloria (jveloriaat_private)
Date: Sun Jan 30 2000 - 22:35:32 PST

  • Next message: Staggs, Michael: "RE: Multi-media friendly Firewalls"

    Richard,
    
    One way to maintain firewall functionality and meet traffic loads is to
    cluster firewalls.  Clustering provides high throughput and high
    availability for firewalls.  One solution that clusters and load balances
    Check Point FW-1 servers is Rainwall, a software-only solution.  It has been
    very successful in a number of mission-critical sites and scales linearly to
    meet increasing bandwidth requirements.
    
    Best regards,
    
    Jules Veloria
    Rainfinity
    1901 Landings Drive
    Mountain View, CA 94043
    (W) 650-404-9824
    (F) 650-404-9877
    jveloriaat_private
    www.rainfinity.com
    
    
    > -----Original Message-----
    > From: owner-firewall-wizardsat_private
    > [mailto:owner-firewall-wizardsat_private]On Behalf Of Scott, Richard
    > Sent: Thursday, January 27, 2000 8:18 AM
    > To: firewall-wizardsat_private
    > Subject: Heavy Load on Firewalls
    >
    >
    > Greetings all,
    >
    > Just wondering what the opinion and ideas that you all have concerning
    > traffic loads on firewalls.
    > Given any firewall, it can only handle so much traffic.  I have
    > come across
    > ideas on load balancing firewalls, but how successful are these,
    > considering
    > then the state tables et al must then be shared between all the firewalls,
    > either in a central deposit or between themselves in the form of packet
    > updates (similar to how BGP works??).
    >
    > What is the best way to secure a huge farm of web servers, having numerous
    > firewalls? Put the firewall behind the web server and a screening
    > router in
    > front, and ideas?
    >
    > Cheers
    > r.
    >
    >
    > Richard Scott
    >
    > The views expressed in this email do not represent Best Buy
    > or any of its subsidiaries.
    >
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 13:59:49 PDT