sub $500-750 CPE firewall for voip-centric application

Jared Mauch jared at puck.nether.net
Fri May 6 00:27:31 UTC 2016


> On May 5, 2016, at 4:52 PM, Javier J <javier at advancedmachines.us> wrote:
> 
> I'm a fan of the EdgeRouterLite3
> 
> 
> I don't manage many small businesses networks anymore because we now do
> only 100% cloud and remote work but I started deploying them to all my old
> clients I still have on retainer.
> 
> 
> It is a wonderful solid set it, and forget it device and you can manage it
> with ssh (it is basically running a fork of Vyatta under the hood on Cavium
> hardware which is nice because it does lots of hardware offload like any
> other enterprise device.)

I’ll +1 the Edgerouter series.  They are cheap and hit the right price 
performance ratio for most homes.

You can do site-to-site IPSEC VPN stuff and easily SSH + tcpdump if necessary.

If you are looking for more complex blocking rules and services, you need to be
looking at something like the Deteque DNS service or the Cisco/OpenDNS services
instead to nuke outbound malware connections and such.

- Jared



More information about the NANOG mailing list