FirewallWizards
[Top] [All Lists]

Re: [fw-wiz] Firewall bake-off?

To: Firewall Wizards Security Mailing List <firewall-wizards@listserv.icsalabs.com>
Subject: Re: [fw-wiz] Firewall bake-off?
From: Carson Gaspar <carson@taltos.org>
Date: Wed, 21 Mar 2007 15:20:11 -0700
Delivered-to: sp-com-lists@consult.net
Delivered-to: fwwizards-list2@consult.net
Delivered-to: firewall-wizards@listserv.icsalabs.com
In-reply-to: <6.2.0.14.2.20070319150730.040d0b60@ranum.com>
List-archive: <https://listserv.icsalabs.com/pipermail/firewall-wizards>
List-help: <mailto:firewall-wizards-request@listserv.icsalabs.com?subject=help>
List-id: Firewall Wizards Security Mailing List <firewall-wizards.listserv.icsalabs.com>
List-post: <mailto:firewall-wizards@listserv.icsalabs.com>
List-subscribe: <https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards>, <mailto:firewall-wizards-request@listserv.icsalabs.com?subject=subscribe>
List-unsubscribe: <https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards>, <mailto:firewall-wizards-request@listserv.icsalabs.com?subject=unsubscribe>
References: <948caa7e0703121637sa283960n552ec4e14900666f@mail.gmail.com> <1CE69584EC644F40B2D9B69003C56AD91F9D025B1B@carbon.japrinting.com> <dc718edc0703181946r2052f437v5afe6d84fc8417f7@mail.gmail.com> <6.2.0.14.2.20070319150730.040d0b60@ranum.com>
Reply-to: Firewall Wizards Security Mailing List <firewall-wizards@listserv.icsalabs.com>
Sender: firewall-wizards-bounces@listserv.icsalabs.com
User-agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061025 Thunderbird/2.0b1pre Mnenhy/0.7.4.0
Marcus J. Ranum wrote:

> This isn't intended as a bash at you, Kevin, because you're not the
> one who raised PPS as a measure of firewall performance (I think it
> was Carson) - but if someone starts talking about PPS as a firewall
> benchmark, they may as well hold up a big sign that reads:
> "I DO NOT UNDERSTAND WHAT A FIREWALL DOES"

Yup, that was I. In my defense, I was evaluating firewalls for market 
data traffic (among other things), where small packet rates and latency 
were important features, as was packet loss behaviour under load. The 
metric wasn't "which vendor is fastest", but rather "can we purchase a 
big enough box such that the performance is > x, and how much does said 
box cost?". Attempting to pry that data out of Checkpoint was next to 
impossible, because it made them look bad. If anyone wants to know to 
what lengths they went to weasel out of providing real performance data, 
buy me a drink some time.

-- 
Carson
_______________________________________________
firewall-wizards mailing list
firewall-wizards@listserv.icsalabs.com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards

<Prev in Thread] Current Thread [Next in Thread>