¶ Deploying CGW on HUNSN RJ08f 1U Appliance
HUNSN RJ08f Firewall Appliance costs around $400 and is equipped with Intel quad-core J4125 processor, 6 x 1GbE links.
Two of the six 1GbE links are typically used for the WAN interfaces while the remaining 4 x 1GbE links are for your LAN network. When you have a single WAN ISP, you have the freedom to use 5 x 1GbE links for your LAN network.
¶ Common Deployment Architecture
A common deployment scenario for deploying Cyber Gateway on HUNSN 1U Firewall Hardware is to replace the Firewall as well as address the WAN Aggregation and Failover use case as shown below. However, you can also use it with a single WAN. In this case, plug in the WAN cable into one of the 6 x 1GbE links ports and use the the remaining 5 x 1GbE links for your LAN network.
¶ Hardware Checklist
You will require the following hardware for Installing Ubuntu and deploying Exium Cyber Gateway on the HUNSN 1U Firewall Hardware.
|
Item |
Quantity |
Remarks |
|---|---|---|
|
HUNSN RJ08f Firewall Appliance 8G RAM 256G SSD |
1(2) |
Quantity 2 is required for High Availability (HA) deployments. |
| VGA to HDMI Adapter |
1 |
You need this adapter to connect the box to an HDMI monitor when installing Ubuntu OS. Note the direction VGA→ HDMI to avoid products that are HDMI to VGA converters. |
|
6 (12) |
6 (12) if you like to use all the 6 LAN ports (6x1Gb/s) |
¶ Deploying CGW on HUNSN 1U Firewall Box
Please follow the instructions below:
- Create a bootable stick, on your computer, download Cyber Gateway ISO image on a USB.
- Make sure your HUNSN 1U Box is powered off.
- Connect the Hunsn box to a monitor using the VGA to HDMI Adapter
- Plug in a keyboard into one of the USB ports on the HUNSN box
- Plug in the USB with the Ubuntu image on it in one of the USB ports on the HUNSN box
- Power on the box, boot the device while pressing F7 and select the USB stick
- Select Install ubuntu and follow the typical ubuntu server installation steps.
If you do not see “Install or Try Ubuntu” but rather enter a boot mode, enter quit. The box comes with Pfsense preinstalled, if you enter into Pfsense mode, you need to restart from the previous step.
- After the ubuntu server installation is complete, you will see a prompt to remove the install media. Remove the USB stick, and hit enter.
- The box will reboot, login with username and password you entered during the above installation steps
- You can continue with the next steps in console using Monitor or note the IP address of the device by typing the command
IP aand SSH into the device from another machine on the same network. - Follow the instructions for Multiple interface CGW deployment
¶ What Performance to expect on the Hunsn 1U box?
In the Multiple Interface cyber gateway, security controls such as Firewall and Web security is provided locally in the CGW. Therefore, we recommend that only the private network traffic goes to the Mesh while the Internet bound Web and SaaS. traffic that has already gone through advanced security controls in the CGW itself can exit locally.
¶ WAN Throughput
HUNSN RJ08f 1U Box supports up to 2x 1Gb/s WAN links. We performed speedtest on each of the WAN links separately and typically see over 900 Mb/s throughput on each link.
¶ LAN Throughput
The total network interface capacity of the HUNSN RJ08f 1U Box is 6 Gb/s (6x 1 Gb/s). You can divide this total throughput between LAN and WAN network based on your use case. We provide two examples in the Table below with two scenarios of LAN and WAN maximum achievable network capacity.
|
LAN Configuration |
WAN Configuration |
LAN Throughput |
WAN Throughput |
|---|---|---|---|
| 4x 1Gb/s | 2x 1Gb/s | 4 Gb/s | 2 Gb/s |
| 5x 1Gb/s | 1x 1Gb/s | 5 Gb/s | 1 Gb/s |
We tested capacity on each of the LAN interface and typically achieve over 900Mb/s TCP throughput on a 1 Gb/s link as shown by the iperf3 tests below.
We performed a Bidirectional iperf3 Test on the cyber gateway running on the HUNSN RJ08f 1U Box. With the bidirectional iperf3 option “--bidir” client opens two TCP connections with the server: one is used for the forward test and one for the reverse test.
We can see the bidirectional throughput over 900 Mb/s on each of the two 4x 1 Gb/s LAN links.
At the end of the test, the server sends what it measured back to the client. The client reports 940Mbits/sec transmitted TX-C bandwidth, as measured from its perspective (sender) and 934Mbits/sec TX-C from the server’s perspective (received). Then it reports 940Mbits/sec received RX-C bandwidth, as measured from its perspective (received) and 934Mbits/sec from the server’s perspective (sender).
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID][Role] Interval Transfer Bitrate Retr
[ 5][TX-C] 0.00-10.00 sec 1.09 GBytes 940 Mbits/sec 0 sender
[ 5][TX-C] 0.00-10.04 sec 1.09 GBytes 934 Mbits/sec receiver
[ 7][RX-C] 0.00-10.00 sec 1.09 GBytes 940 Mbits/sec 0 sender
[ 7][RX-C] 0.00-10.04 sec 1.09 GBytes 934 Mbits/sec receiver
iperf Done.
root@hunsn:~# TBC