NetTecture
Registered: Mar 2009
Posts: 1010 |
06-09-12 05:48 AM
Quote from mastertrader456:
Anyone know of a good firewall that doesn't increase latency. I am having trouble finding a firewall that doesnt slow down the packets to and from thru my trading software. I dont want a firewall inspecting every packet(order/message) I send. It slows my orders down by nearly a second. Im left with having to turn off my firewall while trading. Anyone have any ideas?
Ok, first - EVERY firewall HAS to inspect traffic. Because otherwise it wold not be able to decide what to pass through or not. Simple. You can not have a vegetarian kobe steak. Want to have one router that can do minimal firewall without slowing down? Extreme networks, starting around 10k USD... they do rules processing in hardware. Ok, they are a little large (we talk of routers with 48+ ports full speed), but that is what you want. And you better kno what you talk about when you set them up ;)
Alternative: NO firewall, put your hosting appliance into a dedicated data center, no internet access, you go in via VPN. Pricing starts around 400 USD per month per rack unit height, Chicago.
BUT:
It slows my orders down by nearly a second.
Throw the shit out and get something decent. My own firewall is in the sub 1 ms range, including some routing and putting encrypted traffic on a VPN and doing quality of service. 1 second is NOT a normal operating firewall - it is either hogwash (you know knowing what you talk about), or a broken hardware, or a TERRIBLY overloaded device or a stupid setup. 1 second is AGES for inspecting some small packets.
Anyhow, if you need a decent router / firewall combo. Mikrotik has decent hardware for a low cost. A 450G runs my main office (3 uplinks, oad balancing, ALL traffic VPN's over 3 links), a 1100x2 my data center and I use 750G's when travelling. And virtual RouterOS on Hyper-V may hook my new trading system (tool delivery friday) into this fabric. THe 450G would likely be what you want. BAD news: you better know what you d, that is not an end user device, it is a provider level device.
|
