10mbit fiber to home; NAT router can't fill pipe

10mbit fiber to home; NAT router can't fill pipe

Secure Home | Search | About
 Networking Firewalls    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
10mbit fiber to home; NAT router can't fill pipe Steve 03-12-2006
Posted by Steve on March 12, 2006, 12:26 am
If you were  Registered and logged in, you could reply and use other advanced thread options
You may like to guess where I live; I just got 10 mbit fiber to my home
for $43/month. The first thing I noticed was that eMule quickly
overwhelmed my SMC 2804 WBRP-G router and it hung because of too many
connections. A good workaround was to put my p2p machine into the DMZ
(and also erase the mappings to it). But problems remain.

If I plug my cable directly into the fiber box, I can get a full
megaBYTE/sec upload. But when I run in through the SMC router, it seems
to max out at about 40-60% of that. Most of these NAT routers only have
a 10baseT plug on the WAN port, so clearly they're not even designed to
handle 10mbit and up. And most countries don't offer anything faster
than a megabit or two.

Can someone recommend an industrial strength NAT router that is fast
enough to handle 10, 20 or 100mbits?


Posted by Somebody. on March 12, 2006, 2:06 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

> You may like to guess where I live; I just got 10 mbit fiber to my home
> for $43/month. The first thing I noticed was that eMule quickly
> overwhelmed my SMC 2804 WBRP-G router and it hung because of too many
> connections. A good workaround was to put my p2p machine into the DMZ
> (and also erase the mappings to it). But problems remain.
>
> If I plug my cable directly into the fiber box, I can get a full
> megaBYTE/sec upload. But when I run in through the SMC router, it seems
> to max out at about 40-60% of that. Most of these NAT routers only have
> a 10baseT plug on the WAN port, so clearly they're not even designed to
> handle 10mbit and up. And most countries don't offer anything faster
> than a megabit or two.
>
> Can someone recommend an industrial strength NAT router that is fast
> enough to handle 10, 20 or 100mbits?

Indeed I would expect your SMC or similiar (D-link, linksys etc) device to
be overwhelmed by that sort of speed.

As long as you don't want to do antivirus at your gateway, any FortiGate
unit (even the lowly 50A) can handle your 10Mbps feed.

For a 20Mbps feed, I'd look at at least the FG60, again, with no Virus
Scanning at the gateway you'll be fine.

On a 100Mbps feed you should probably look at a FG200.

These recommendations are very, very ballpark, it depends what you want to
do (what protections you want) and the character of the traffic. If you
were just going to do NAT and port filtering/firewalling, even the 50A can
do 60Mbps by spec though I've never seen anyone try to run on that hard
before. You should consult a qualified local reseller for more specific
recommendations.

-Russ.



Posted by DigitalVinyl on March 12, 2006, 7:56 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

>You may like to guess where I live; I just got 10 mbit fiber to my home
>for $43/month. The first thing I noticed was that eMule quickly
>overwhelmed my SMC 2804 WBRP-G router and it hung because of too many
>connections. A good workaround was to put my p2p machine into the DMZ
>(and also erase the mappings to it). But problems remain.
>
>If I plug my cable directly into the fiber box, I can get a full
>megaBYTE/sec upload. But when I run in through the SMC router, it seems
>to max out at about 40-60% of that. Most of these NAT routers only have
>a 10baseT plug on the WAN port, so clearly they're not even designed to
>handle 10mbit and up. And most countries don't offer anything faster
>than a megabit or two.
>
>Can someone recommend an industrial strength NAT router that is fast
>enough to handle 10, 20 or 100mbits?


One of the problems with peer to peers is they generate a wave of
incoming requests which slam the router. Far more requests then your
PC is processing. When I run bittorrent clients or direct Connect my
router goes berserk with traffic even if I have very little going on
in the client. When you shut the client down the traffic will
continue, even for minutes afterwards as the network retains you in a
netwrok of peers that haven't updated and recognized you're gone.

More than traffic volume, I find the connection volume drowns out the
wimpy soho market boxes when doing certain p2p.

I can't recommend a cheap alternative as I've mostly worked with
prefessional level firewalls (Pix & Checkpoint).

There are low ends ($300 - $500) units but I haven't seen anybody put
any of them through there paces with real world traffic situations.
Even high end PIX appliances come with multiple Gigabit fiber
connections but theoretically they would max out internal buses by
400mbps, and I've seen them perform poorly at under 100Mbps. A major
culprit there was the 50,000+ open connections--largely p2p and virus
traffic.

You might want to look at sonicwall, pix 501, the bottom
chekcpoint/nokia boxes. They're all into the sub$500 market now.


Posted by whos on March 13, 2006, 2:17 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Steve wrote:

> ... to max out at about 40-60% of that. Most of these NAT routers only have
> a 10baseT plug on the WAN port, so clearly they're not even designed to
> handle 10mbit and up. And most countries don't offer anything faster
> than a megabit or two.
>
> Can someone recommend an industrial strength NAT router that is fast
> enough to handle 10, 20 or 100mbits?


Not exactly industrial strength, but take a look at the D-link "GamerLounge"
routers, (DGL-4100 wired, and 4300 wireless).

I have the 4100. It supports much larger route tables than the older little
home routers, thousands of connections compared to hundreds. It has a more
robust processor, and has a 10/100 Mb WAN side connection and 10/100/1000 LAN
side connection. You should be able to find it for about $150.



Similar ThreadsPosted
Four or Six Port MM LC Fiber PCI-X Cards for Windows?? July 21, 2007, 3:47 pm
Fiber connector type of Fortigate 3600 February 27, 2005, 6:44 pm
newbie home router Q February 21, 2008, 3:14 am
Newbie Home Network/ADSL Router query. July 13, 2005, 4:22 pm
Which home user router has a decent firewall inside it? December 6, 2007, 10:16 pm
Connecting to office Terminal Server from behind home Linksys router August 11, 2004, 7:32 pm
First time home wireless - how to match PC to router - setup question June 9, 2007, 4:00 pm
Home Security eBook - Home Security - How to Protect Your Family and Your Property - Home_Security.exe (0/2) November 5, 2004, 5:25 pm
why wireless router cheaper than plain router? June 15, 2005, 11:40 am
Home Net Firewall July 15, 2004, 3:01 pm

The site map in XML format XML site map

Contact Us | Privacy Policy