{"id":36,"date":"2015-04-07T08:03:34","date_gmt":"2015-04-07T08:03:34","guid":{"rendered":"http:\/\/www.citadelica.com\/?p=36"},"modified":"2015-09-02T06:14:17","modified_gmt":"2015-09-02T06:14:17","slug":"platform","status":"publish","type":"post","link":"https:\/\/www.citadelica.com\/?p=36","title":{"rendered":"Router Node"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\" size-medium wp-image-18 alignright\" src=\"http:\/\/www.citadelica.com\/wp-content\/uploads\/2015\/04\/MB-14-300x197.png\" alt=\"MB-14\" width=\"300\" height=\"197\" srcset=\"https:\/\/www.citadelica.com\/wp-content\/uploads\/2015\/04\/MB-14-300x197.png 300w, https:\/\/www.citadelica.com\/wp-content\/uploads\/2015\/04\/MB-14.png 335w, https:\/\/www.citadelica.com\/wp-content\/uploads\/2015\/04\/MB-14-207x136.png 207w, https:\/\/www.citadelica.com\/wp-content\/uploads\/2015\/04\/MB-14-260x170.png 260w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/>We provide a single scalable &#8216;Router Node<span style=\"font-size: 13.3333330154419px; line-height: 20px;\">&#8216;<\/span>\u00a0with capability to morph into any customizable array of routing devices. These nodes are equipped with FreeBSD flavored architecture with support for ARM, x86, and VMFS based host machines.<br \/>\nVia package managed software a network node can be customized and multiplied to serve a network function need. Our \u2018Singularity Portal\u2019 allows graphical based function modifier for easy customization of overall system. The system allows for selection of network functions that can emulate any networking device.<\/p>\n<p>&nbsp;<\/p>\n<h2>Device Functions include<\/h2>\n<p>\u2022 Deployable sub-system layer (FreeBSD)<br \/>\n\u2022 Firewall<br \/>\n\u2022 Wireless Access Point (must install a wifi interface)<br \/>\n\u2022 Multiple Subnet Firewall<br \/>\n\u2022 Traffic Shaping<br \/>\n\u2022 State Table<br \/>\n\u2022 NAT2<br \/>\n\u2022 SAN initiator\/target<br \/>\n\u2022 NAS device host<br \/>\n\u2022 CARP (failover)<br \/>\n\u2022 Load Balancing both Outbound and Inbound<br \/>\n\u2022 nmap, ping, traceroute via the GUI<br \/>\n\u2022 VPN \u2013 IPsec, OpenVPN, PPTP<br \/>\n\u2022 PPPoE Server<br \/>\n\u2022 Reporting Engine<br \/>\n\u2022 SNMP<br \/>\n\u2022 Dynamic DNS<br \/>\n\u2022 Captive Portal<br \/>\n\u2022 DHCP Server and Relay<br \/>\n\u2022 Wake on LAN<\/p>\n<p>Our products can be altered for any custom solution and we provide 1Y technical support for enabling your product with our morphable network layer.\u00a0Common Deployments of our software is used in about every type and size of network environment imaginable, and is almost certainly suitable for your network whether it contains one computer, or thousands as we can provide virtual solutions for any deployment. We provide various software features including a web GUI front end to host network services or simply to manipulate or monitor network attributes. Our software package is open source and is released the BSD and GNU licenses. We have different variations of our software package that our hardware come equipped with but they are mostly capable of providing the features outlined below.<\/p>\n<h2>Perimeter Firewall<\/h2>\n<p>The most common deployment of Citadelica software solution is as a perimeter firewall, with an Internet connection plugged into the WAN side, and the internal network on the LAN side. It supports multiple Internet connections as well as multiple internal interfaces.<br \/>\nOur software solution accommodates networks with more complex needs, such as multiple Internet connections, multiple LAN networks, multiple DMZ networks, etc. Unlike many similar solutions, you can deploy systems with dozens of interfaces if needed.<br \/>\nSome users also add BGP capabilities to provide connection redundancy and load balancing.<\/p>\n<h2>LAN or WAN Router<\/h2>\n<p>The second most common deployment is as a LAN or WAN router. This is a separate role from the perimeter firewall in midsized to large networks, and can be integrated into the perimeter firewall in smaller environments.<\/p>\n<h2>LAN Router<\/h2>\n<p>In larger networks utilizing multiple internal network segments, Citadelica software is a proven solution to connect these internal segments. This is most commonly deployed via the use of VLANs with 802.1Q trunking. Multiple Ethernet interfaces are also used in some environments.<br \/>\nIn environments requiring more than 3 Gbps or 1 million packets per second of sustained throughput, no router based on commodity hardware offers adequate performance. Such environments need to deploy layer 3 switches (routing done in hardware by the switch) or high end ASIC-based routers. As commodity hardware increases in performance, and general purpose operating systems like FreeBSD improve packet processing capabilities in line with what new hardware capabilities can support, scalability will continue to improve with time.<\/p>\n<h2>WAN Router<\/h2>\n<p>For WAN services providing an Ethernet port to the customer, Citadelica software is a great solution for private WAN routers. It offers all the functionality most networks require and at a much lower price point than big name commercial offerings.<\/p>\n<h2>Wireless Access Point<\/h2>\n<p>Our products can be deployed strictly as a wireless access point. Wireless capabilities can also be added to any of the other types of deployments discussed in our WiFi section in further detail.<\/p>\n<h2>Special Purpose Appliances<\/h2>\n<p>Many deploy such software packages as a special purpose appliance. The following are three scenarios we know of, and there are sure to be many similar cases we are not aware of. Most any of the functionality of pfSense can be utilized in an appliance-type deployment. You may find something unique to your environment where this type of deployment is a great fit.<\/p>\n<h2>VPN Appliance<\/h2>\n<p>Some users drop in Citadelica software solutionas a VPN appliance behind an existing firewall, to add VPN capabilities without creating any disruption in the existing firewall infrastructure. Most VPN deployments also act as a perimeter firewall, but this is a better fit in some circumstances.<\/p>\n<h2>Sniffer Appliance<\/h2>\n<p>One user was looking for a sniffer appliance to deploy to a number of branch office locations. Commercial sniffer appliances are available with numerous bells and whistles, but at a very significant cost especially when multiplied by a number of branch locations. We offers a web interface for tcpdump that allows the downloading of the resulting pcap file when the capture is finished. This enables this company to capture packets on a branch network, download the resulting capture file, and open it in Wireshark for analysis.<br \/>\nOur product is not nearly as fancy as commercial sniffer appliances, but offers adequate functionality for many purposes at about 2% of the total cost.<\/p>\n<h2>DHCP Server Appliance<\/h2>\n<p>Once the user deploys single interface our system installs as solely DHCP servers. In most environments this probably does not make much sense. But in this case, the user\u2019s staff were already familiar and comfortable with pfSense and this enabled further deployments without additional training for the administrators, which was an important consideration in this deployment.<\/p>\n<h2>DNS Server Appliance<\/h2>\n<p>We also provide a custom version of our software package with a simplified web interface, providing only the functionality desired on a system functioning strictly as a DNS server. There is a tinydns package available for our system that allows you to add this functionality to a stock software install.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>We provide a single scalable &#8216;Router Node&#8216;\u00a0 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":18,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-36","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-products"],"_links":{"self":[{"href":"https:\/\/www.citadelica.com\/index.php?rest_route=\/wp\/v2\/posts\/36","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.citadelica.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.citadelica.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.citadelica.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.citadelica.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=36"}],"version-history":[{"count":7,"href":"https:\/\/www.citadelica.com\/index.php?rest_route=\/wp\/v2\/posts\/36\/revisions"}],"predecessor-version":[{"id":109,"href":"https:\/\/www.citadelica.com\/index.php?rest_route=\/wp\/v2\/posts\/36\/revisions\/109"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.citadelica.com\/index.php?rest_route=\/wp\/v2\/media\/18"}],"wp:attachment":[{"href":"https:\/\/www.citadelica.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=36"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.citadelica.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=36"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.citadelica.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=36"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}