Hello Fedora ARM hackers,
I'm shopping around for a device to provide basic routing and firewall functions.
The goal is to provide remote access to an IP camera through satellite internet connection. To keep the camera and link from getting buried or abused, I want to limit access to connections from a particular /25. If using a dynamic IP, the satellite modem uses NAT and does not offer firewall or port forwarding capability. If using a static IP, a public IP is routed directly to the inside device, without a firewall.
I'm thinking a small multipurpose ARM device would be a cost effective solution. Any problems that can't be resolved via ssh will be dealt with by post or remote hands, so it must be fairly reliable, not require user intervention to survive power cycles, etc. I'd like a dual Ethernet device, but a USB nic could do. There will need to be a case or finished chassis of some sort, preferably one that could protect that second NIC from accidental disconnection or tampering.
Is there anything on the market that fits the bill, or am I better off with some OpenWRT supported consumer router, or maybe something else?
--Pete
I am working with the Cubieboards doing similar things. I got a Cubieboard 2 with case and 5v2a powersupply for $60. Only one ethernet, you will need to add a USB nic. Or a one arm router into a VLAN switch. Right now I am running F20 remix on it. 'Soon' F21 real will be available, and there is work on Centos 7 for v7 SOCs.
And the Cubieboard as a SATA2 interface, so your OS can be on it.
On 07/21/2014 07:59 PM, Pete Travis wrote:
Hello Fedora ARM hackers,
I'm shopping around for a device to provide basic routing and firewall functions.
The goal is to provide remote access to an IP camera through satellite internet connection. To keep the camera and link from getting buried or abused, I want to limit access to connections from a particular /25. If using a dynamic IP, the satellite modem uses NAT and does not offer firewall or port forwarding capability. If using a static IP, a public IP is routed directly to the inside device, without a firewall.
I'm thinking a small multipurpose ARM device would be a cost effective solution. Any problems that can't be resolved via ssh will be dealt with by post or remote hands, so it must be fairly reliable, not require user intervention to survive power cycles, etc. I'd like a dual Ethernet device, but a USB nic could do. There will need to be a case or finished chassis of some sort, preferably one that could protect that second NIC from accidental disconnection or tampering.
Is there anything on the market that fits the bill, or am I better off with some OpenWRT supported consumer router, or maybe something else?
--Pete
arm mailing list arm@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/arm
I'm shopping around for a device to provide basic routing and firewall functions.
The goal is to provide remote access to an IP camera through satellite internet connection. To keep the camera and link from getting buried or abused, I want to limit access to connections from a particular /25. If using a dynamic IP, the satellite modem uses NAT and does not offer firewall or port forwarding capability. If using a static IP, a public IP is routed directly to the inside device, without a firewall.
I'm thinking a small multipurpose ARM device would be a cost effective solution. Any problems that can't be resolved via ssh will be dealt with by post or remote hands, so it must be fairly reliable, not require user intervention to survive power cycles, etc. I'd like a dual Ethernet device, but a USB nic could do. There will need to be a case or finished chassis of some sort, preferably one that could protect that second NIC from accidental disconnection or tampering.
Is there anything on the market that fits the bill, or am I better off with some OpenWRT supported consumer router, or maybe something else?
Probably the closest to your needs at the moment will be the Utilite [1] as it has models with dual NICs and a case. At the moment the support in Fedora is basic but I'm working to improve that before the release of F-21.
Peter
On 07/22/2014 04:29 AM, Peter Robinson wrote:
but I'm working to improve that before the release of F-21.
So how do we do F21 testing?
Same as all the other releases. Details in the wiki as always
https://fedoraproject.org/wiki/Architectures/ARM#Download_the_Latest_Develop...
On 07/22/2014 10:04 AM, Peter Robinson wrote:
On 07/22/2014 04:29 AM, Peter Robinson wrote:
but I'm working to improve that before the release of F-21.
So how do we do F21 testing?
Same as all the other releases. Details in the wiki as always
https://fedoraproject.org/wiki/Architectures/ARM#Download_the_Latest_Develop...
Thanks. I asked this question back on the 20th and did not get an answer. Hopefully I brought along everything I need here at IETF to get started. Thing is that I can't get HDMI in working on the room TV, so I am headless on my system (I did bring a rollup keyboard!). And I did forget my USB serial connectors.
----- Original Message -----
On 07/22/2014 04:29 AM, Peter Robinson wrote:
but I'm working to improve that before the release of F-21.
So how do we do F21 testing?
Testing is currently being recorded on the Fedora wiki[1], you can help by testing anaconda installations or images on your favourite device.
Disk images can be downloaded from koji:
http://koji.fedoraproject.org/koji/tasks?state=all&view=tree&method=...
Happy Testing, Paul
[1] - https://fedoraproject.org/wiki/Test_Results:Fedora_21_Rawhide_2014_07_Base [2] - https://fedoraproject.org/wiki/Test_Results:Fedora_21_Rawhide_2014_07_Instal...
arm mailing list arm@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/arm
On 07/22/2014 10:10 AM, Paul Whalen wrote:
----- Original Message -----
On 07/22/2014 04:29 AM, Peter Robinson wrote:
but I'm working to improve that before the release of F-21.
So how do we do F21 testing?
Testing is currently being recorded on the Fedora wiki[1], you can help by testing anaconda installations or images on your favourite device.
Disk images can be downloaded from koji:
http://koji.fedoraproject.org/koji/tasks?state=all&view=tree&method=...
Happy Testing, Paul
[1] - https://fedoraproject.org/wiki/Test_Results:Fedora_21_Rawhide_2014_07_Base [2] - https://fedoraproject.org/wiki/Test_Results:Fedora_21_Rawhide_2014_07_Instal...
I need a lot more help. Basically I need a cookbook on how to build the bootable SD card.
For the F20 remix I followed:
https://fedoraproject.org/wiki/Architectures/ARM/Rawhide/Installation
What do I change for the F21 testing?
On 07/22/2014 10:10 AM, Paul Whalen wrote:
----- Original Message -----
On 07/22/2014 04:29 AM, Peter Robinson wrote:
but I'm working to improve that before the release of F-21.
So how do we do F21 testing?
Testing is currently being recorded on the Fedora wiki[1], you can help by testing anaconda installations or images on your favourite device.
Disk images can be downloaded from koji:
http://koji.fedoraproject.org/koji/tasks?state=all&view=tree&method=...
So I am looking at this page and trying to figure out which is the one for me.
For my Fedora 20 remix I am using:
http://fedorapeople.org/~lkundrak/a10-images/Fedora-Xfce-armhfp-20-a10-1-sda...
Even though the Cubieboard 2 as an a20.
Should I be using ID 7176834? Or something else?
Oops forgot to send to the list
From: Timothy Krantz [mailto:tkrantz@stahurabrenner.com] Sent: Tuesday, July 22, 2014 10:03 AM To: 'Pete Travis' Subject: RE: [fedora-arm] Simple routing device advice (mildly OT)
Hello Fedora ARM hackers,
I'm shopping around for a device to provide basic routing and firewall functions.
The goal is to provide remote access to an IP camera through satellite internet connection. To keep the camera and link from getting buried or abused, I want to limit access to connections from a particular /25. If using a dynamic IP, the satellite modem uses NAT and does not offer firewall or port forwarding capability. If using a static IP, a public IP is routed directly to the inside device, without a firewall.
I'm thinking a small multipurpose ARM device would be a cost effective solution. Any problems that can't be resolved via ssh will be dealt with by post or remote hands, so it must be fairly reliable, not require user intervention to survive power cycles, etc. I'd like a dual Ethernet device, but a USB nic could do. There will need to be a case or finished chassis of some sort, preferably one that could protect that second NIC from accidental disconnection or tampering.
Is there anything on the market that fits the bill, or am I better off with some OpenWRT supported consumer router, or maybe something else?
--Pete
You might want to take a look at the Dreamplug or Mirabox from globalscale. They both have dual Ethernet and cases. I use both for exactly the reasons you want. I have run fedora on both but currently run slackware on both for reasons clear only to me.
Tim
On Tue, Jul 22, 2014 at 6:06 PM, Timothy Krantz tkrantz@stahurabrenner.com wrote:
Oops forgot to send to the list
From: Timothy Krantz [mailto:tkrantz@stahurabrenner.com] Sent: Tuesday, July 22, 2014 10:03 AM To: 'Pete Travis' Subject: RE: [fedora-arm] Simple routing device advice (mildly OT)
Hello Fedora ARM hackers,
I'm shopping around for a device to provide basic routing and firewall functions.
The goal is to provide remote access to an IP camera through satellite internet connection. To keep the camera and link from getting buried or abused, I want to limit access to connections from a particular /25. If using a dynamic IP, the satellite modem uses NAT and does not offer firewall or port forwarding capability. If using a static IP, a public IP is routed directly to the inside device, without a firewall.
I'm thinking a small multipurpose ARM device would be a cost effective solution. Any problems that can't be resolved via ssh will be dealt with by post or remote hands, so it must be fairly reliable, not require user intervention to survive power cycles, etc. I'd like a dual Ethernet device, but a USB nic could do. There will need to be a case or finished chassis of some sort, preferably one that could protect that second NIC from accidental disconnection or tampering.
Is there anything on the market that fits the bill, or am I better off with some OpenWRT supported consumer router, or maybe something else?
--Pete
You might want to take a look at the Dreamplug or Mirabox from globalscale. They both have dual Ethernet and cases. I use both for exactly the reasons you want. I have run fedora on both but currently run slackware on both for reasons clear only to me.
The dreamplug is only ARMv5 so is unsupported. I have a mirabox and it does work but it has a terrible uboot from the last decade so doesn't support device tree OOTB so there's hacks needed to support booting and it's not particularly pretty, not something I would recommend particularly to deal with remote support.
Peter
-----Original Message----- From: Peter Robinson [mailto:pbrobinson@gmail.com] Sent: Tuesday, July 22, 2014 1:14 PM To: Timothy Krantz Cc: arm@lists.fedoraproject.org Subject: Re: [fedora-arm] FW: Simple routing device advice (mildly OT)
On Tue, Jul 22, 2014 at 6:06 PM, Timothy Krantz tkrantz@stahurabrenner.com wrote:
Oops forgot to send to the list
From: Timothy Krantz [mailto:tkrantz@stahurabrenner.com] Sent: Tuesday, July 22, 2014 10:03 AM To: 'Pete Travis' Subject: RE: [fedora-arm] Simple routing device advice (mildly OT)
Hello Fedora ARM hackers,
I'm shopping around for a device to provide basic routing and firewall functions.
The goal is to provide remote access to an IP camera through satellite internet connection. To keep the camera and link from getting buried or abused, I want to limit access to connections from a particular /25. If using a dynamic IP, the satellite modem uses NAT and does not offer firewall or port forwarding capability. If using a static IP, a public IP is routed directly to the inside device, without a firewall.
I'm thinking a small multipurpose ARM device would be a cost effective solution. Any problems that can't be resolved via ssh will be dealt with by post or remote hands, so it must be fairly reliable, not require user intervention to survive power cycles, etc. I'd like a dual Ethernet device, but a USB nic could do. There will need to be a case or finished chassis of some sort, preferably one that could protect that second NIC from accidental disconnection or tampering.
Is there anything on the market that fits the bill, or am I better off with some OpenWRT supported consumer router, or maybe something
else?
--Pete
You might want to take a look at the Dreamplug or Mirabox from
globalscale.
They both have dual Ethernet and cases. I use both for exactly the reasons you want. I have run fedora on both but currently run slackware on both for reasons clear only to me.
The dreamplug is only ARMv5 so is unsupported. I have a mirabox and it does work but it has a terrible uboot from the last decade so doesn't support device tree OOTB so there's hacks needed to support booting and it's not particularly pretty, not something I would recommend particularly to deal with remote support.
Peter
The mirabox u-boot is indeed old and does not support "un-appended" device tree, that is true. It does work fine with the, albeit ugly, appended device tree. Mine is running 3.16-rc6 with an appended device tree right now.
Tim
On 07/22/2014 01:06 PM, Timothy Krantz wrote:
Oops forgot to send to the list
From: Timothy Krantz [mailto:tkrantz@stahurabrenner.com] Sent: Tuesday, July 22, 2014 10:03 AM To: 'Pete Travis' Subject: RE: [fedora-arm] Simple routing device advice (mildly OT)
Hello Fedora ARM hackers,
I'm shopping around for a device to provide basic routing and firewall functions.
The goal is to provide remote access to an IP camera through satellite internet connection. To keep the camera and link from getting buried or abused, I want to limit access to connections from a particular /25. If using a dynamic IP, the satellite modem uses NAT and does not offer firewall or port forwarding capability. If using a static IP, a public IP is routed directly to the inside device, without a firewall.
I'm thinking a small multipurpose ARM device would be a cost effective solution. Any problems that can't be resolved via ssh will be dealt with by post or remote hands, so it must be fairly reliable, not require user intervention to survive power cycles, etc. I'd like a dual Ethernet device, but a USB nic could do. There will need to be a case or finished chassis of some sort, preferably one that could protect that second NIC from accidental disconnection or tampering.
Is there anything on the market that fits the bill, or am I better off with some OpenWRT supported consumer router, or maybe something else?
--Pete
You might want to take a look at the Dreamplug or Mirabox from globalscale. They both have dual Ethernet and cases. I use both for exactly the reasons you want. I have run fedora on both but currently run slackware on both for reasons clear only to me.
Both these and the freescale boxes are out of my price range. So I am sticking with the Cubieboard and adding the USB ethernet.
I MIGHT be willing to pay that price if it had 1+4 ethernet to make it a router.
-----Original Message----- From: Robert Moskowitz [mailto:rgm@htt-consult.com] Sent: Tuesday, July 22, 2014 1:16 PM To: Timothy Krantz; arm@lists.fedoraproject.org Subject: Re: [fedora-arm] FW: Simple routing device advice (mildly OT)
On 07/22/2014 01:06 PM, Timothy Krantz wrote:
Oops forgot to send to the list
From: Timothy Krantz [mailto:tkrantz@stahurabrenner.com] Sent: Tuesday, July 22, 2014 10:03 AM To: 'Pete Travis' Subject: RE: [fedora-arm] Simple routing device advice (mildly OT)
Hello Fedora ARM hackers,
I'm shopping around for a device to provide basic routing and firewall
functions.
The goal is to provide remote access to an IP camera through satellite
internet connection. To keep the camera and link from getting buried or abused, I want to limit access to connections from a particular /25. If using a dynamic IP, the satellite modem uses NAT and does not offer firewall or port forwarding capability. If using a static IP, a public IP is routed directly to the inside device, without a firewall.
I'm thinking a small multipurpose ARM device would be a cost effective
solution. Any problems that can't be resolved via ssh will be dealt with by post or remote hands, so it must be fairly reliable, not require user intervention to survive power cycles, etc. I'd like a dual Ethernet device, but a USB nic could do. There will need to be a case or finished chassis of some sort, preferably one that could protect that second NIC from accidental disconnection or tampering.
Is there anything on the market that fits the bill, or am I better off with
some OpenWRT supported consumer router, or maybe something else?
--Pete
You might want to take a look at the Dreamplug or Mirabox from
globalscale. They both have dual Ethernet and cases. I use both for exactly the reasons you want. I have run fedora on both but currently run slackware on both for reasons clear only to me.
Both these and the freescale boxes are out of my price range. So I am sticking with the Cubieboard and adding the USB ethernet.
I MIGHT be willing to pay that price if it had 1+4 ethernet to make it a router.
I believe the OP mentioned that he wanted a "case" or enclosure. I was not aware that the cubieboard had one available.
Tim
On 07/22/2014 01:24 PM, Timothy Krantz wrote:
-----Original Message----- From: Robert Moskowitz [mailto:rgm@htt-consult.com] Sent: Tuesday, July 22, 2014 1:16 PM To: Timothy Krantz; arm@lists.fedoraproject.org Subject: Re: [fedora-arm] FW: Simple routing device advice (mildly OT)
On 07/22/2014 01:06 PM, Timothy Krantz wrote:
Oops forgot to send to the list
From: Timothy Krantz [mailto:tkrantz@stahurabrenner.com] Sent: Tuesday, July 22, 2014 10:03 AM To: 'Pete Travis' Subject: RE: [fedora-arm] Simple routing device advice (mildly OT)
Hello Fedora ARM hackers,
I'm shopping around for a device to provide basic routing and firewall
functions.
The goal is to provide remote access to an IP camera through satellite
internet connection. To keep the camera and link from getting buried or abused, I want to limit access to connections from a particular /25. If using a dynamic IP, the satellite modem uses NAT and does not offer firewall or port forwarding capability. If using a static IP, a public IP is routed directly to the inside device, without a firewall.
I'm thinking a small multipurpose ARM device would be a cost effective
solution. Any problems that can't be resolved via ssh will be dealt with by post or remote hands, so it must be fairly reliable, not require user intervention to survive power cycles, etc. I'd like a dual Ethernet device, but a USB nic could do. There will need to be a case or finished chassis of some sort, preferably one that could protect that second NIC from accidental disconnection or tampering.
Is there anything on the market that fits the bill, or am I better off with
some OpenWRT supported consumer router, or maybe something else?
--Pete
You might want to take a look at the Dreamplug or Mirabox from
globalscale. They both have dual Ethernet and cases. I use both for exactly the reasons you want. I have run fedora on both but currently run slackware on both for reasons clear only to me.
Both these and the freescale boxes are out of my price range. So I am sticking with the Cubieboard and adding the USB ethernet.
I MIGHT be willing to pay that price if it had 1+4 ethernet to make it a router.
I believe the OP mentioned that he wanted a "case" or enclosure. I was not aware that the cubieboard had one available.
I got a Cubieboard 2, case, and power supply from iotllc for $60. Shipped in 2 days.
Yes, I had to 'put it together'. I had to stick the heatsink on the SOC and snap the card into the case and screw on the cover.
If you want a case to include a drive, then you need a makerbot. Though the Cubietruck case has room for a drive AND a battery.
-
Paul Whalen -
Pete Travis -
Peter Robinson -
Robert Moskowitz -
Timothy Krantz