Skip to contentSkip to conversation

Poll on large sites that deploy Iptables.

DISCUSSION Brett Simpson 3 participants 4 messages Jun 2, 2004 – Jun 3, 2004

lore
Share & tools
lore

Brett Simpson

author
#0 lore raw

We are a large organization, 3000 plus users, considering switching from Checkpoint FW1 to Iptables. I was wondering how many large organizations (1000 plus users) are using Iptables in a production environment?

For those that are using Iptables and were previously using a commercial product what were your reasons for switching and what issues have you seen using Iptables?

Thanks,
Brett

#1 lore raw
Quoted 6 lines · Brett Simpson

We are a large organization, 3000 plus users, considering switching from Checkpoint FW1 to Iptables. I was wondering how many large organizations (1000 plus users) are using Iptables in a production environment?

For those that are using Iptables and were previously using a commercial product what were your reasons for switching and what issues have you seen using Iptables?

Thanks,
Brett

I do not have any massive deployments yet but the ISCS project
(http://iscs.sourceforge.net) is initially based upon iptables as the firewall and is targeted to large enterprise and carrier networks. We've not yet had the opportunity to stress it. We have placed iptables based firewalls on some client sites that are smaller than yours but very avid web users (large, international PR firm) and we've not had them break a sweat. They have never gone down. I'm looking forward to both the other responses and the day when I can say we have ISCS deployments numbering thousands of gateways and many tens of thousands of users - John

Signature · 3 lines
Open Source Development Corporation
Financially sustainable open source development
http://www.opensourcedevelopmentcorp.com
author
#2 lore raw
In reply to Brett Simpson
Quoted 7 lines · Brett Simpson

We are a large organization, 3000 plus users, considering switching from Checkpoint FW1 to Iptables. I was wondering how many large organizations (1000 plus users) are using Iptables in a production environment?

For those that are using Iptables and were previously using a commercial product what were your reasons for switching and what issues have you seen using Iptables?

Thanks for the responses.

I have a few more questions:
Does anyone know of any large firewall sites? Large site would consist of large numbers of users, rules, routes, tunnels, or high bandwidth use.

Of those who answered the above question:
Are any of those well known companies (i.e. like AOL, IBM, etc... ) who use Iptables?

What version of Linux are they using?

What are they doing for support? (i.e. Redhat, IBM, 3rd party support, mailing lists, etc)

How many physical firewalls are deployed?

Is it known if they converted from a commercial firewall? (i.e Checkpoint, NetScreen, Cisco PIX, etc)

Thanks in advance,
Brett

#3 lore raw

* Brett Simpson <[email protected]> 3. Jun 04:

Quoted 2 lines

Does anyone know of any large firewall sites? Large site would consist of large numbers of users, rules, routes, tunnels, or high bandwidth use.

Some months ago there was a message at the list from Wolfgang Stindl. <URL:http://lists.netfilter.org/pipermail/netfilter/2004-March/050891.html>

From his address domainpart I could imagine a very large setup, maybe you can send him a note and ask for some details.

HTH,
regards, Frank.

Signature · 1 line
Sigmentation fault