SFF server platform

[David Bandel]

On Sat, 05 Feb 2005 14:47:03 -0800, Tony Alfrey
<tonyalfrey at earthlink.net> wrote:
> David Bandel wrote:
> > On Fri, 04 Feb 2005 22:45:34 -0600, Michael Hipp <Michael at hipp.com> wrote:
> >
> >>I need to spec a very low-end server box for a small client. Needs to be small
> >>and quiet so I'm looking into SFF boxes. It will need 3 LAN ports to act as a
> >>firewall/router for their network. Only one internal IDE drive needed and
> >>probably no floppy or CD.
> >>
> >>Anyone have any recommendations on a SFF box for such an application?
> >>
> >
> >
> > I rent boxes like this.  Here's what I get:
> > at CaseOutlet (http://www.caseoutlet.com/):
> > ITX 2677R using a CL1000 motherboard (two ethernet ports).  I then put
> > in either another ethernet card or a frame relay card (you'll need to
> > buy the riser card for this).  I buy neither CD-ROM nor floppy, but do
> > get either a 40Gb hdd or (better) a 1Gb flash RAM, 128Mb RAM.
> >
> > Note that you'll need to adapt the flash RAM/IDE adapter into the case
> > by drilling some holes for screws to hold it in place, but it works
> > nicely.  (If you're not comfortable with this much engineering, just
> > juy the hard drive).
> >
> > I have "drop in" bridging firewalls (no IP needed), two or three port
> > routing firewalls with VPN, and all are 60w 12v boxes, so last forever
> > on even a small UPS.  The brick also provides some protection against
> > surges.
> >
> > And the 2677R is a nice small form factor box (I buy the black case --
> > literally a black box).  In fact, I'm ordering four more this weekend
> > for some new clients.
> >
> > Ciao,
> >
> > David A. Bandel
> 
> Very interesting link.
> Very very newbie questions:
> a.  I assume that, with an appropriate wireless card, one can use this
> box to form an all wireless network and avoid the extra ethernet port?

Yep.  This takes _one_ PCI card.  That PCI card can be a frame relay
card, T1/E1 card, or a PCMCIA bridge for a wireless card (or just a
PCI wireless card, your choice).

> b.  w/ no CD rom, how do you load an OS?  Format and load the HD
> elsewhere first?

Usually, that's the easiest way.

> c.  this looks like about $400 by the time you are finished.  Why would
> one "rent" this?  Is this all wrapped into a service contract that you
> provide?

Yep.  $125 install, $45/mo rental.  No worries (that's my job, along
with keeping it up to date).  These folks like the price (I like them
capitalizing my company).  Less than $400 in my hands.  What I sell
them is expertise in Firewalls (I don't even mention the OS).

> d.  "I have "drop in" bridging firewalls"  Very newbie Q:  Do they go in
> this case?  I know what a 12V brick is but not a "bridging firewall".
> "The brick also provides some protection . . . "  does the brick go in
> this case?  Add maybe an extra $100?

Brick is a 110v to 12v converter that plugs into the wall and powers a
board that connects to the motherboard and provides 12v, 5v, 3.3v. 
Think about a laptop, but no batteries and no keyboard/screen. 
Headless.

A bridging firewall is a bridge with firewall rules.  Using a 2.6
kernel, you would run iptables but use the --physdev-in eth# and
--physdev-out eth# which correspond to the two sides of your br0
(bridge) device.


> 

Wow, this one prompted some interest.  Looks like I have several to respond to.

Ciao,

David A. Bandel
-- 
Focus on the dream, not the competition.
            - Nemesis Air Racing Team motto