Transcript
lightning wire labs Hardware Appliances 2017/I
IPFire Hardware Appliances Together with our hardware partner TX-Team, we from Lightning Wire Labs offer hardware appliances that come with a pre-installed version of IPFire - An Open Source Firewall Distribution. Our appliances are certified by the IPFire developers directly and come with selected components that are working perfectly together with the IPFire operating system. These device are easy to set up and require a minimal amount of maintenance. We also offer support services for our appliances. For more information, see our Support Services Brochure.
Why IPFire? IPFire is an Open Source Firewall Distribution. It focusses on security, scalability and ease of use and comes with a set of features that is not only for a day-to-day use case in offices, schools or authorities: IPFire is extensible and built for professional use in all environments. Easy to administer over a web user interface, versatile firewall engine, package management system for quick updates, Web Proxy with Content Filtering, VPN with IPsec and OpenVPN, Intrusion Detection/Prevention, Quality of Service, Wireless Access-Point, built-in backup solution and monitoring with graphs of the system and network load, and many more...
Scalability matters There is always a right solution for you, as our appliances scale very well from enterprise networks down to branch networks with only one active user. As your company grows, so does your firewall appliance. No matter how many users there are in your network, there are no additional charges or license costs.
Simple & Secure IPFire is a complete solution that comes with a significant amount of functionality. At the same time, it proves that good network security has not have to be complex. The web user interface is easy to administrate and gives you a comprehensive overview about your network status. All appliances come pre-installed, so you just have to plug it in and begin using it.
We are here to help If you need support, our team of experts is always available for consulting.
Who uses Lightning Wire Labs IPFire Appliances? We are proud to have many customers who rely and trust IPFire and the Lightning Wire Labs appliance product line. These are a few notable examples:
Bundeszentrale für gesundheitliche Aufklärung Bundeszentrale für gesundheitliche Aufklärung (Federal Centre of Health Education) is an authority in the portfolio of the German Federal Ministry of Health (Bundesministerium für Gesundheit). At the headquarters in Cologne, an IPFire Premium Appliance is serving approximately 250 users and protecting servers in the DMZ. For that, administrator Armin Geyer and his team use the IPFire web proxy to filter web access and load-balancing features for their in-house mail services. Homepage: www.bzga.de
Brecht-Schule Hamburg Brecht School is the largest independent private school in the city of Hamburg, Germany. A customized IPFire Professional Appliances is running the school’s network and separating the IT infrastructure from the public network. The main feature is the web proxy which is used to filter out adult websites and other content that is unsuitable for minors. VPN services are used for the administrators to connect from remote and do day-to-day administrative tasks or handle emergencies from home without the need of heading to the school. “The IPFire Appliance is ’rock solid’, easy to configure, fast and full with useful features that are indispensable for our school, like the web proxy. We almost exclusively use Linux and Open Source software, so IPFire is a perfect fit. Lightning Wire Labs’ support is excellent.” — Thoralf Söldenwagner, Head of IT at Brecht-Schule Hamburg
Homepage: www.brecht-schulen.de
Case Study: Advertisement Streaming in Supermarkets Together with a customised hardware solution manufactured by TX-Team, Lightning Wire Labs was involved in a project creating an extensible network throughout the entire country of Germany that is designed to play back video advertisements in supermarkets. Customers that were queuing for the cashier can watch small news bulletins and advertisements for products or local shops on a large screen.
VPN Connection over 4G/3G/2G
The role of IPFire is to provide an Internet connection to the media systems that are responsible to play back the clips. That is realised by using mobile networks (depending on the availability in the area of the supermarket), which is cheap and also very quickly to install everywhere since no extra wiring is needed. To protect any data transferred from the content server in the headquarters to the shops, a secure VPN connection is established from each shop to a central IPFire instance running at the headquarters. This connection is also used for monitoring, maintenance and management of the systems located in the shops. You will find more information about this project on our website at: http://www.
lightningwirelabs.com/case-studies
IPFire Professional/Premium Appliances The Professional version of our appliance is designed for large businesses or businesses which do a great deal of work on the Internet. This appliance delivers a comprehensive security solution, that is easily manageable, yet has a significant amount of power. It easily handles up to thousands of users while consuming less than 30 watts. The IPFire Professional Appliance is perfectly used in your head-quarter to connect branch offices with VPN technology, or in schools to use the web filtering mechanisms designed to protect children from malicious content. With fantastic performance and the rich set of features that come with IPFire, there is nothing it cannot do.
Table 1: Cryptographic features of the IPFire Appliances IPFire Premium Appliance IPFire Eco Appliance Hardware Random Number Generator Available Hardware-accelerated algorithms AES-256 (CBC) AES-192 (CBC) AES-128 (CBC)
Yes
No
520 MByte/s 595 MByte/s 692 MByte/s
20 MByte/s 23 MByte/s 28 MByte/s
Technical Insights Networking Performance Performance of the network is crucial as we are moving more and more services that our daily lives heavily rely on are moved into IP networks without enhancing the performance of those networks at the same time. - Michael Tremer, Lightning Wire Labs All Lightning Wire Labs appliances are equipped with four active Gigabit network adapters. One for each zone in which IPFire divides the network. Cryptography Our IPFire Premium Appliance provides hardware modules for better and faster cryptography. These are especially important if you are running multiple VPN tunnels to your partners or branch offices and speed up many other applications as well. Random Number Generator VPNs and all other cryptography relies on random numbers that are used to generate keys. The more connections IPFire has to maintain at the same time, the more random numbers are required. Unfortunately it is impossible generating these random numbers with any software algorithm. That is why the IPFire Premium Appliance comes with a hardware module that provides true random numbers that are mixed into the system’s entropy pool. Encryption/Decryption Speedup When operating multiple VPN connections, there is a lot of data that is passed through these tunnels. All this data is encrypted with a strong algorithm which requires a lot of work for the processor. The IPFire Premium Appliance comes with hardware extensions that are able to encrypt and decrypt hundreds of Megabytes per second with the Advanced Encryption Standard (AES) algorithm and other ciphers.
Form factor Our Premium and Professional appliances come in the 19” form factor that they can be installed with your other infrastructure in a server rack. All connectors except the power connector are placed at front so that they are easily accessible. Storage All IPFire Appliances come with Solid-State Disks (SSDs). Fast storage is essential for services like the web proxy to keep response times low. With the Premium Appliance all data is mirrored on two SSDs for redundancy and even faster data access. This feature is also available as an upgrade for our IPFire Professional appliance. NEW: 10G Ethernet The IPFire Premium Appliance is optionally available with two 10G Ethernet ports. Those will connect your networks with the latest generation of the Ethernet standard and make it ready for future. The appliance is also able to encrypt and decrypt data packets with a speed of up to 10 Gigabit and send them through an IPsec VPN connection. This is enough to connect multiple branch offices of biggest enterprises.
IPFire Eco Appliances The IPFire Eco Appliance Series is the right solution for small to medium-sized businesses and those with remote branch offices. It comes with all the features as the bigger brother, but in a much smaller package. We recommend our IPFire Eco Appliance for 1 to 25 users and our customers can utilize this appliance to create VPN connections which directly connect their branch offices to the main headquarters. The application-level web filter, the anti-virus filter, the intrusion prevention system, and of course the robust firewall, this appliance provides even the smallest of businesses the best security. Consuming only 15 watts, this appliance is very environmentally-friendly. It’s also fan-less and makes no noise at all, make it right at home in an office environment with no server rack. NEW: The IPFire Eco Plus Appliance is perfect for businesses with a stronger emphasis on fast networking. It fits everywhere where its little brother fits, but comes with a faster processor and even faster Ethernet controllers.
Optional Features for the IPFire Eco Appliance Our IPFire Eco Appliance is easily extensible with more mobile networking interfaces and other functionality. Please contact us if you need a customised version of our IPFire Eco appliance tailored for your individual needs. Wireless LAN With the additional wireless interface, you can turn your IPFire Appliance Eco into a wireless access point and securely connect notebooks, mobile phones and more to your company network. Wireless Features Wireless Standards Frequency Bands Antennas
IEEE 802.11 a/b/g/n 5 GHz & 2.4 GHz (one at a time) two
Bandwidth
up to 450 MBit/s
LTE/3G Modem To connect your IPFire Eco Appliance to the Internet via mobile networks of the fourth or third generation we are able to offer you an internal LTE/3G modem. With this you will be able to provide a fast and reliable Internet connection where ever you find a place to plug the appliance in. Constructions sites, gatherings & conferences and places with no DSL or cable connection are only a few examples where this comes handy. This feature can not be combined with the Wireless LAN feature. Form factor & case The IPFire Eco appliance comes in a desktop case which is suitable for use in offices and homes. If you want to install the appliance in a 19" rack, we are able to build a custom version in a rack-mount case. We are also able to build this appliance in top hat rail and waterproof cases. Optional Features for the IPFire Eco Plus Appliance There is a rack-mount kit optionally available for the IPFire Eco Plus Appliances which allows you to integrate the small appliance into an existing IT infrastructure that is hosted in a rack on site.
IPFire Duo Box Business Even smaller than the IPFire Eco product line is the IPFire Duo Box. It is an embedded platform that is designed for use in small offices with only one desk or in the home. The IPFire Duo Box comes with a basic set of network interfaces that allow to use it in all basic setups with an Internet connection over DSL, cable, etc., one local wired network and a WiFi network. Lightning Wire Labs and TX-Team created the IPFire Duo Box as a versatile and small alternative to the IPFire Appliance series. Many applications like the Internet of Things require internet access for machines, sensors and users of course at all sorts of locations. The IPFire Duo Box is small enough to fit anywhere, it is not consuming much power and overall very environment-friendly. Business Edition The Business edition of the IPFire Duo Box comes with a great pack of additional services around the hardware for small businesses and system houses that resell it to their own customers. It is also very well customisable so that you can tailor the IPFire Duo Box to your own needs or the needs of your customers. It can be rebranded, modems for mobile networks like LTE/3G/GSM can be added, and many more things. Please get in touch with us. A consumer edition of the IPFire Duo Box is available at the Fountain Networks online store.
Full Specifications Rack-mount Appliances IPFire Premium Revision Form factor Cooling
IPFire Professional 2.0
3.0 19" rack mountable, 1U four long-life fans with ball bearing
System Components Processor Processor Cores Memory Storage RAID
Intel Xeon Series Quad Core 16 GB, ECC 2x 120GB SSD yes
Networking Features Network Controllers Connectors Dimensions (WxHxD, mm)
Intel i3 Series Dual Core 8 GB, ECC 64GB SSD optional
4x active Gigabit Ethernet Controllers 1x AC-in, 1x VGA, 2x USB 3.0, 2x USB 2.0, 1x PS/2, 4x RJ-45 483 x 44 x 382
Power Consumption Idle Full load
27W 93W
Power Supply Certifications
27W 46W
100-240V - 50-60 Hz CE, RoHS, ErP/EuP
Warranty
36 months
24 months, 36 months (optional)
Non-rack-mount Appliances IPFire Eco Plus Revision Form factor Cooling System Components Processor Processor Cores Memory Storage Networking Features Network Controllers Wireless Controllers Connectors
Dimensions (WxHxD, mm) Power Consumption Idle Full load Power Supply Certifications Warranty
IPFire Eco
2.0
IPFire Duo Box Business
2.0
1.1 Tinier than Mini-ITX
Mini-ITX fanless Intel Atom C-Series Octo Core Quad Core 8 GB, ECC 4 GB, ECC 64GB SSD
Intel Celeron Series Dual Core 2 GB 32GB SSD
4x active Gigabit Ethernet 2x Gigabit Ethernet 802.11abgn up to 300 MBit/s, 2x MIMO (optional) 1x DC-in 12V 1x DC-in 1x VGA wide voltage 2x USB 2.0 1x HDMI 4x RJ-45 + 2x USB 3.0 1x Mgmnt LAN 2x RJ-45 214 x 70 x 211 111 x 52 x 134 10W 19W
8W 13W
6W 11W
100-240V - 50-60 Hz CE, RoHS, ErP/EuP 24 months, 36 months (optional)
36 months
Not satisfied? Not satisfied with the hardware configuration we offer? Get in touch with us and ask for an IPFire scaled to fit your custom needs. The design of our hardware is based on our experience with what customers need the most. There are always exceptions where you might need a custom solution.
Reseller Partnership Our Reseller Partnership Program was brought to live to help system integrators to get their customers what they need. As a hardware vendor we provide you with service around our appliances so that in all cases you are able to react and handle everything to the full satisfaction of your own customers.
Professional Care
Basic Care
With our Professional Care Package we With every purchase of a Lightning Wire will take extra care of all your purchased Labs appliance, you will get our Basic appliances. An extended warranty and Care Package with all these essentials: access to our hardware support team will guarantee that your appliance will Standard 2-year warranty work even longer. Bring-In Hardware Replacement Extended 3-year warranty Advance Hardware Replacement at the next business day1 Support Hotline for hardwarerelated issues Reseller discounts Get in touch with one of our sales representatives to learn more about our Reseller Partnership and the benefits it brings to you and your customers today. Want to use IPFire in a project? We have already realised many projects with a customised version of IPFire and a customised hardware solution for many customers. The incredible versatility of IPFire is a great foundation for any project. We have a team of experts that can help you planning and executing your project. Our services include development of a custom software solution, custom hardware design for even the most difficult cases, manufacturing, logistics and long-term support. Please contact us and make an appointment for an in-depth talk about your project and any of our solutions is right for you.
1) For all RMAs that reach us until 12 PM
Our hardware partner: TX-Team Lightning Wire Labs is teaming up with TX-Team, a company from Bavaria, Germany with over 20 years of experience in building hardware appliances for special purposes. The IPFire appliances you see in this brochure benefit from the expertise of both companies in their respective fields and make them to the most perfect line of hardware appliances for IPFire we can image.
IPFire Project Funding A major portion of the profits are used to fund ongoing development and maintainance of the IPFire project. It is very important to us that those who profit from the project also fund its development and this is our means of accomplishing this. With your support or reseller subscription, you automatically contribute to researching new technology and making IPFire more amazing.
About Lightning Wire Labs Lightning Wire Labs provides support services for the free firewall distribution IPFire, as well as other technologies. We combine industrial expertise with innovative technology and try to embreace open-source solutions wherever possible. Lightning Wire Labs was founded in 2012 and is headquartered in the Ruhr region of Germany - a metropolitan area in the biggest economy of Europe, from where we serve customers all over the world.
lightning wire labs.com GmbH Gerhardstraße 8 45711 Datteln Germany
+49 2363 918038
[email protected]
VAT-ID: DE308759123