Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


ScottNoakes

20 posts

Geek

Linewize

#210531 31-Mar-2017 19:18
Send private message

Hi Networky people,

 

Thought it might be worth putting this out there on GeekZone. We've developed the above solution and are now taking it to the world. If you're interested to have a play you can download the image and run in a VM or on your own hardware. Its used in over 200 schools now and 30 countries and does cool stuff like application aware QOS. Its free to use and delivers enterprise grade features.

 

Check out this link for more info: http://www.linewize.com/cloud-firewall 

 

Cheers Scott.


View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2
hio77
'That VDSL Cat'
12970 posts

Uber Geek

ID Verified
Trusted
Voyager
Subscriber

  #1751392 31-Mar-2017 23:22
Send private message

Interesting setup.

 

 

 

What kernel platform is used for layer7? 





#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

 

 


Affiliate link
 
 
 

Affiliate link: Norton Secure VPN helps secure private information using bank-grade encryption when using public Wi-Fi on your PC, Mac, or mobile device.
ScottNoakes

20 posts

Geek

Linewize

  #1751521 1-Apr-2017 09:39
Send private message

Hi. We used to use Debian but have now created our own distribution so we can facilitate remote image updates. In regards to Layer 7 we have built our own connection tracker and create signatures for application traffic. We've had this running at 70Mbps on a raspberry Pi and we do 1Gbps throughout on a $500 commodity router.

hio77
'That VDSL Cat'
12970 posts

Uber Geek

ID Verified
Trusted
Voyager
Subscriber

  #1752639 1-Apr-2017 13:47
Send private message

ScottNoakes: Hi. We used to use Debian but have now created our own distribution so we can facilitate remote image updates. In regards to Layer 7 we have built our own connection tracker and create signatures for application traffic. We've had this running at 70Mbps on a raspberry Pi and we do 1Gbps throughout on a $500 commodity router.

 

 

 

Glad to see testing being put down to a raspberry pi even, that certainly puts this into context!

 

 

 

 





#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

 

 




ScottNoakes

20 posts

Geek

Linewize

  #1752743 1-Apr-2017 16:25
Send private message

Hi Hio77, thanks for your comment. :) Linewize is used by the largest schools in NZ such as Mt Albert Grammar and Burnside High School. Burnside shift 1TB of traffic through our device every day. A detroit school district shifts 5TB of traffic through our firewall every day. Amongst other international customers we also run the network for a university of 5000 students in Botswana, so the product is well proven. The Pi example is just to show that it can scale from the smallest device to the largest VM.


Aaron2222
86 posts

Master Geek


  #1752867 1-Apr-2017 19:47
Send private message

Slightly confused as to whether the web filtering is free or not. Pricing page says content filtering under edgewise and talks about only reporting under surfwize, but web filtering is under surfwize in the configuration.

deadlyllama
1153 posts

Uber Geek

Trusted

  #1752870 1-Apr-2017 20:05
Send private message

What platforms and hardware support is available?  You talk about open source - where's the source?  And is there a cheap content filtering subscription available for home use?


Aaron2222
86 posts

Master Geek


  #1752874 1-Apr-2017 20:25
Send private message

deadlyllama:

What platforms and hardware support is available?  You talk about open source - where's the source?  And is there a cheap content filtering subscription available for home use?



I found this. Sphirewall is the base on which Linewize is built upon from what I can tell. Seems up to date, lots of recent edits.



deadlyllama
1153 posts

Uber Geek

Trusted

  #1753000 2-Apr-2017 07:34
Send private message

I asked for the ISO last night ... no reply yet :-(  Linewize need to work on their instant gratification.


ScottNoakes

20 posts

Geek

Linewize

  #1753012 2-Apr-2017 08:22
Send private message

Hi DeadlyLlama,

 

Apologies for the delay, you should have a response now, I'll automate that response on monday. Linewize is developed from Sphirewall as mentioned. FOr hardware I'd recommend a PCEngines APU-1D for a residential situation. Otherwise Quanmax NWA-6500 for higher throughput environments. Filtering for casual use is free, we source and collate lists and signatures for this and update every 24 hrs.

 

Cheers Scott.


BarTender
3419 posts

Uber Geek

ID Verified
Trusted
Lifetime subscriber

  #1753013 2-Apr-2017 08:23
Send private message

deadlyllama:

What platforms and hardware support is available?  You talk about open source - where's the source?  And is there a cheap content filtering subscription available for home use?



I think the open source part is the most worrying. Is it just a standard IPTables based Linux firewall or is there some other magic sauce involved. Plus I assume squid for transparent proxy.

What about alerting and monitoring of the solution such as if someone is doing something bad internally or if you're getting DDoSed.

Firewalls are expensive and difficult. But that's what the internet is.




and


ScottNoakes

20 posts

Geek

Linewize

  #1753368 2-Apr-2017 20:08
Send private message

Hi DeadlyLama, you can find the source code repositories here: https://bitbucket.org/account/user/sphirewalllabs/projects/SPHIR

 

The firewall has been built from scratch and is not IPTables based, the application, device, user aware filtering engine is our secret sauce. It now represents over 10 years of development by our team, is used in over 30 countries, across all our networks transfers on average 25TB of data per day. So the technology is mature and proven. Over 20 NZ MSPs resell the solution.

 

We do not portray ourselves as a Proxy Server or UTM (altho we do offer Snort integration). Our focus is on unified access management, providing complete visibility and control over network and content access. We provide searchable analytics over every current network connection, packet trace etc. In 85% of our schools we're installed as a Lyr2 bridge, but for the other 15% we run as the full firewall, including stateful LTP2/IPsec VPN support.

 

We understand firewalls are expensive and difficult, and that is exactly the problem we're solving. :)

 

 

 

 


Lias
4885 posts

Uber Geek

ID Verified
Trusted
Lifetime subscriber

  #1753415 2-Apr-2017 23:02
Send private message

Make the ISO downloadable without registration. There is a special place in hell for the developers of websites that don't even give you the download link when you put in a fake email address for the compulsory registration form. 





I'm a geek, a gamer, a dad and an IT Professional. I have a full rack home lab, size 15 feet, an epic beard and Asperger's. I'm a bit of a Cypherpunk, who believes information wants to be free and the Net interprets censorship as damage and routes around it.


Aaron2222
86 posts

Master Geek


  #1753447 3-Apr-2017 08:01
Send private message

Lias:

Make the ISO downloadable without registration. There is a special place in hell for the developers of websites that don't even give you the download link when you put in a fake email address for the compulsory registration form. 



There is a download link, but like the source code it's hidden away a bit. Go to the Linewize site, scroll down to the bottom, click documentation, then Installing Linewize from ISO in the side bar, then click the download link near the top of the page.

ScottNoakes

20 posts

Geek

Linewize

  #1753604 3-Apr-2017 10:53
Send private message

Lias:

 

Make the ISO downloadable without registration. There is a special place in hell for the developers of websites that don't even give you the download link when you put in a fake email address for the compulsory registration form. 

 

 

Hi Lias, have fixed the form so that you can put a fake email in and download the ISO. :) I have called ahead to hell and they are making the arrangements. The ISO download link is mentioned in the technical docs too.

 

 

 

 

 

 


ScottNoakes

20 posts

Geek

Linewize

  #1753606 3-Apr-2017 10:55
Send private message

We have just created a link that will always point to the latest ISO. You can download it here:

 

https://s3-ap-southeast-2.amazonaws.com/sphireos-updates/iso/stable/sphireos-installer.latest.iso


 1 | 2
View this topic in a long page with up to 500 replies per page Create new topic





News and reviews »

Samsung Introducing Galaxy Z Flip4 and Galaxy Z Fold4
Posted 11-Aug-2022 01:00


Samsung Unveils Health Innovations with Galaxy Watch5 and Galaxy Watch5 Pro
Posted 11-Aug-2022 01:00


Google Bringing First Cloud Region to Aotearoa New Zealand
Posted 10-Aug-2022 08:51


ANZ To Move to FIS Modern Banking Platform
Posted 10-Aug-2022 08:28


GoPro Hero10 Black Review
Posted 8-Aug-2022 17:41


Amazon to Acquire iRobot
Posted 6-Aug-2022 11:41


Samsung x LIFE Picture Collection Brings Iconic Moments in History to The Frame
Posted 4-Aug-2022 17:04


Norton Consumer Cyber Safety Pulse Report: Phishing for New Bait on Social Media
Posted 4-Aug-2022 16:50


Microsoft Announces New Solutions for Threat Intelligence and Attack Surface Management
Posted 3-Aug-2022 21:54


Seagate Addresses Hyperscale Workloads with Enterprise-Class Nytro SSDs
Posted 3-Aug-2022 21:50


Visa Launching Eco-friendly Payment Solutions in New Zealand
Posted 3-Aug-2022 21:48


NCR Delivers Services to Run Bank of New Zealand ATM Network
Posted 30-Jul-2022 11:06


New HP Portfolio Supports New Era of Hybrid Work
Posted 28-Jul-2022 17:14


Harman Kardon Launches Citation MultiBeam 1100 Soundbar
Posted 28-Jul-2022 17:10


Nanogirl Labs Launches Creator Project
Posted 28-Jul-2022 17:05









Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.







Backblaze unlimited backup