Re: [44net] directly routed subnets

To expand further on a multi-homed system and with some solid network experience running a global company network via VSAT and other Global Mixed Links: 1) Regarding Routers - A FreeBSD Router running a package such as PFSENSE fits the bill http://www.pfsense.org and is well in the price range of any amateur operator (Free) except it needs to run on a very robust hardware platform. 2) Regarding the requirements for security - I agree that a form of security is needed to ensure that someone is not abusing the system. A content filter such as Squid/SquidGuard or DansGuardian could be used to ensure that no nasty things come about across amateur radio bands or the 44 Net. 3) Regarding scalability and IP addressing issues, we should have the capabilities for a regional sub-router that has all tie ins to the MPLS via a tunnel, direct connection, or ip-ip tunnel. This can easily doll out SECURE VPN (OpenVPN) tunnels to any node or sub-node that is connected to a public network with little to no overhead. This also opens up another aspect of bridging the network together and that is MULTICAST voip using an open source low bandwidth codec as an alternative to the DSTAR AMBE Codec. 4) Regarding DNS, this can be performed rather easily as if you are utilizing a *nix based OS you can run a DNS Mirror of the entire network locally as this is a smaller portion of the internet as a whole. I am also going to add that caching can also be utilized by sub-nodes to serve out pages that have been served out before thus cutting bandwidth requirements by 40% or more, this also allows something else - A COMPLETELY OFFLINE COPY! so if the internet ever goes down, there is a copy of the pages in question on a regional node, that may have a chance to propagate the page to a user that needs it should we have global network backbone outages. In our network for Louisiana that is in the design phases now, we have incorporated all of these things, as well as given an ipip tunnel option for each regional router that can populate edge and border gateways behind it with BGP routes and information. This is all incorporated using RF links and if not in range of an RF link, a tunnel to one of 9 regional routers. We have also carved portions of the address space to allow this as well. In order to obtain internet access, a user must authenticate their call sign so that all web traffic can be logged, in the event of an abuse of the system. The entire system is set to utilize HSMM (High Speed Multi Media) Mesh Radio Links in the 900MHz, 430MHz (Testing New Cards now), 5.8GHz, and 2.4GHz bands. I also have drawings, diagrams, and explanations of the entire network design if anyone is interested. Best Regards, Elias Basse KD5JFE Louisiana AMPRNET Coordinator On Mar 6, 2012, at 4:48 PM, K7VE - John wrote: