[clug] low power device for VPN end point

[Robert Edwards]

On 23/01/2017 6:07 pm, Alex Ferrara wrote:
> That is really disappointing. Does anyone know if things have improved since 2015 when that story was current?
>
> Alex Ferrara

I wish it had, but I can't find any evidence that this has improved.

In fact, the contrary, they appear to be being very evasive to any/all
requests for access to the kernel and bootloader source, which is
helping to normalise such behaviour by other companies.

Note that the EdgeRouters do run Debian (GNU) Linux, so you can get
the source for most of the packages etc., but you can not build your
own kernel, install it and expect it to do anything vaguely similar to
the one that they ship. So, clearly a GPL violation of the Linux kernel
in anyones understanding of the GPL.

cheers,

Bob Edwards.

>
>
>> On 23 Jan 2017, at 5:58 pm, Bob Edwards <bob at cs.anu.edu.au> wrote:
>>
>> On 23/01/17 14:31, Alex Ferrara wrote:
>>> Ubiquity Edgerouter. They are really very good. Embedded Linux of course.
>>
>> https://news.slashdot.org/story/15/04/07/1740217/how-ubiquiti-networks-is-creatively-violating-the-gpl :
>>
>> "Networking company Ubiquiti Networks violates the GPL, but not in
>>  the way you'd expect. Not only did the kernel shipped in their router
>>  firmware not correspond to the sources given, but their failure to
>>  provide the source led to a vulnerability they created being
>>  unpatched long after its disclosure. They're maintaining the
>>  appearance of compliance without actually complying with the GPL."
>>
>> references: Four ways Ubiquiti Networks is creatively violating the GPL
>> http://libertybsd.net/ubiquiti/
>>
>> cheers,
>>
>> Bob Edwards.
>>
>>>
>>> Sent from my iPhone
>>>
>>>> On 23 Jan 2017, at 2:04 pm, Luke Mewburn <lukem-clug at mewburn.net> wrote:
>>>>
>>>> On Mon, Jan 09, 2017 at 10:11:20PM +1100, Tony Lewis wrote:
>>>> | I'm looking for a low power device to be a VPN end point, and I am
>>>> | after recommendations, please.
>>>> |
>>>> | The key requirement is high VPN throughput.  I lean towards
>>>> | OpenVPN, but because it's single-threaded, it seems there are
>>>> | often struggles to get anywhere close to native throughput.  I
>>>> | understand IPSec implementations are/can be multithreaded, so that
>>>> | might better fit the bill.
>>>> |
>>>> | HDMI and GPU and desktop stuff is not important.  Just low power,
>>>> | high crypto throughput, high reliability and solid Linux support.
>>>> |
>>>> | Tony
>>>>
>>>> Hi Tony,
>>>>
>>>> As you probably know, various low TDP Intel CPUs support the
>>>> AES-NI instructions, and newer OpenSSL has the ability to offload
>>>> that to the CPU.
>>>> E.g., my 3.5 year old Macbook Air has a 15W i7-4650U CPU @ 1.70GHz,
>>>> and it has the AES CPU instructions.
>>>>
>>>> How about an Intel NUC or one of an equivalent/cheaper unit
>>>> from Gigabyte (etc), with a 15W or 35W CPU?
>>>> Or is that outside your power/cost budget?
>>>>
>>>> cheers,
>>>> Luke.
>>>>
>>>> --
>>>> linux mailing list
>>>> linux at lists.samba.org
>>>> https://lists.samba.org/mailman/listinfo/linux
>>>
>>
>>
>> --
>> linux mailing list
>> linux at lists.samba.org
>> https://lists.samba.org/mailman/listinfo/linux
>