Pass by deployment

From WFilter Documents and Tutorials
(Difference between revisions)
Jump to: navigation, search
(Created page with "#Pros and Cons ##Pros Pass-by deployment has the minimal influence to your current network. ##*Integrated with your current hardware, network topology can remain unchanged. #...")
 
 
(8 intermediate revisions by one user not shown)
Line 1: Line 1:
 
#Pros and Cons
 
#Pros and Cons
 
##Pros
 
##Pros
−
Pass-by deployment has the minimal influence to your current network.
 
 
##*Integrated with your current hardware, network topology can remain unchanged.
 
##*Integrated with your current hardware, network topology can remain unchanged.
 
##*No influence to your network performance. In pass-by mode, WFilter analyse copies of network packets and does not delay the original packets. So your internet speed will not be affected.
 
##*No influence to your network performance. In pass-by mode, WFilter analyse copies of network packets and does not delay the original packets. So your internet speed will not be affected.
Line 9: Line 8:
 
##*n pass-by mode, WFilter sends RST packets to terminate tcp connections. But it can not block udp traffic, so you also need to block certain udp ports in your router or firewall. Please check:[[depolyment_blockudp|How to block certain UDP ports in router/firewall?]]
 
##*n pass-by mode, WFilter sends RST packets to terminate tcp connections. But it can not block udp traffic, so you also need to block certain udp ports in your router or firewall. Please check:[[depolyment_blockudp|How to block certain UDP ports in router/firewall?]]
 
#Router Examples
 
#Router Examples
 +
##Network topology diagram(the router shall support "port mirroring" feature):<br>[[image:passby_router_topology.png]]<br>
 +
##Examples:
 +
##*[[Cisco_RVS4000|Cisco RVS4000]]
 
#Switch Examples
 
#Switch Examples
 +
##Network topology diagram(the switch shall support "port mirroring" feature):<br>[[image:passby_switch_topology.png]]<br>
 +
##Examples:
 +
##*[[switch_Huawei_Quidway_S5012P|Huawei Quidway S5012P]]
 +
##*[[switch_Cisco_2950|Cisco 2950]]
 +
##*[[switch_DLink_3226|DLink 3226]]
 +
##*[[switch_DLink_DES-1210-28|DLink DES-1210-28]]
 +
##*[[switch_DLink_DES-1226G|DLink DES-1226G]]
 +
##*[[switch_Linksys_SRW224G4|Linksys SRW224G4]]
 +
##*[[switch_Netgear_GS748AT|Netgear GS748AT]]
 +
##*[[switch_HP_Procurve1800|HP Procurve1800]]
 +
##*[[switch_Dell_Powerconnect_2848|Dell Powerconnect 2848]]
 
#Others
 
#Others
 +
#*[[deployment_tomato|Deploy WFilter with tomato router]]
 +
#*[[deployment_iptables|Setup port-mirroring with iptables]]
 +
#*[[deployment_network_tab|Dry a network tap to deploy WFilter]]

Latest revision as of 14:22, 15 July 2014

  1. Pros and Cons
    1. Pros
      • Integrated with your current hardware, network topology can remain unchanged.
      • No influence to your network performance. In pass-by mode, WFilter analyse copies of network packets and does not delay the original packets. So your internet speed will not be affected.
      • Internet access is still available even if the WFilter computer crash or power off.
    2. Cons
      • Requires "port mirroring" feature of your switch or router.
      • n pass-by mode, WFilter sends RST packets to terminate tcp connections. But it can not block udp traffic, so you also need to block certain udp ports in your router or firewall. Please check:How to block certain UDP ports in router/firewall?
  2. Router Examples
    1. Network topology diagram(the router shall support "port mirroring" feature):
      Passby router topology.png
    2. Examples:
  3. Switch Examples
    1. Network topology diagram(the switch shall support "port mirroring" feature):
      Passby switch topology.png
    2. Examples:
  4. Others
Retrieved from "http://wiki.wfiltericf.com/index.php?title=Pass_by_deployment&oldid=79"
Personal tools
Namespaces

Variants
Actions
Navigation
Tools