Buying appliances as servers?

Discussion in 'General Chat' started by oddball, Jul 7, 2018.

  1. oddball

    oddball Active Member

    Joined:
    May 18, 2018
    Messages:
    153
    Likes Received:
    48
    I recently discovered this avenue. It seems like Cisco builds most of their appliances on their standard UCS platform. For example, the WSA S680 appears to be a UCS-240 m3 under the hood with a E5-2680 v0 and 32GB of RAM.

    What's interesting about this is these things go on ebay for nothing because they're such special use devices.

    The question is can you simply install Linux? My guess is yes. The thought is if you took out the SD cards, and the drives you have a bare metal machine. It isn't like the Cisco OS is on the metal itself, it's just software on a drive. So in theory with any of these you can just wipe the drives and you have a cheap server.

    Anyone else exploring this?

    I have an order in for a Netflow aggregation device. It's a 220 m4 with dual e5-2660-v3 and 64GB of RAM, 2TB of disks and 2x dual 10Gbe NICs, brand new, $1k. Seems like a decent deal. I even found instructions online for how to re-install the netflow software, it's just on the bootable SD cards. So in this case it should be a reasonable server without the price tag.

    Thoughts? Experiences?
     
    #1
  2. MiniKnight

    MiniKnight Well-Known Member

    Joined:
    Mar 30, 2012
    Messages:
    2,951
    Likes Received:
    860
    You're probably fine unless there's some crazy locked BIOS. I'm down to try too but I didn't see the netflow.
     
    #2
  3. oddball

    oddball Active Member

    Joined:
    May 18, 2018
    Messages:
    153
    Likes Received:
    48
  4. turgin

    turgin Member

    Joined:
    May 16, 2016
    Messages:
    51
    Likes Received:
    6
    I did this with some Nexus 1010 appliances. I forget which C series they were but under the hood they were standard Xeon CPU and DDR3 ECC RAM. I even added the second CPU and more RAM and used them as ESXi compute nodes. The only problem I had was adding PCIe cards caused the fans to ramp up and down. Ended up being too loud so I just salvaged the CPU and RAM bits for use on Supermicro motherboards. I scrapped the 1u chassis.

    I do like the Cisco CIMC though.
     
    #4
  5. oddball

    oddball Active Member

    Joined:
    May 18, 2018
    Messages:
    153
    Likes Received:
    48
    I'm sitting here with the 3340-K9 and it works as expected. I popped out the SD card, and it's a raw 220 m4 server. Came with 2x Intel 520-X cards, which was nice.

    Tossed in a VIC 1227 (dual 40Gbe) and it worked out of the box. Will install Linux and we'll have a docker host.

    Once I discovered UCS that's all I've been buying. Have a few legacy HP's, but CIMC is excellent. Love this platform.
     
    #5
  6. BlueFox

    BlueFox Active Member

    Joined:
    Oct 26, 2015
    Messages:
    657
    Likes Received:
    231
    I used to do this back in the day with Symantec and RSA appliances and load pfSense on them. Generally the only issue I ran into was lack of VGA, but there were ways around that and it's less common now. I've run across a lot of rebranded Supermicro and Dell hardware too.
     
    #6
  7. BLinux

    BLinux cat lover server enthusiast

    Joined:
    Jul 7, 2016
    Messages:
    2,356
    Likes Received:
    816
    I help out one of the dev teams that builds one of the Cisco appliances. At least for that team, the Cisco appliance is built on a standard UCS server, perhaps with some rebranding here and there, but it's basically just a normal x86 server. Even the OS is just a normal enterprise Linux distro, and then we add our special sauce on top of that for packet collection and other stuff. By the way, I believe Quanta makes the UCS servers for Cisco.

    On a similar note, I often find that appliance built on Supermicro systems are also often a cheaper way to get a Supermicro server. There were a lot of smaller NAS/SAN companies that built their appliance on Supermicro and just added their own OS and maybe a few special PCI-E cards, but nothing else was customized. For example, if I'm ever looking for a Supermicro 836 3U, I often look for a Dell Compellent CT-040 and it's usually a lot cheaper.
     
    #7
  8. Robert Fontaine

    Robert Fontaine Active Member

    Joined:
    Jan 9, 2018
    Messages:
    113
    Likes Received:
    26
    Things that make you go hm.
     
    #8
  9. ebacho

    ebacho New Member

    Joined:
    Feb 11, 2018
    Messages:
    4
    Likes Received:
    0
    Quanta didn't do the recent UCS offerings. Foxconn did the M3 and M4 generations while Wistron did the M5.
     
    #9
  10. gregsachs

    gregsachs Active Member

    Joined:
    Aug 14, 2018
    Messages:
    224
    Likes Received:
    43
    Followup: Vidyu Vidyurouter xl is a R410 it looks like, and polycom oem a r610.
     
    #10
  11. WANg

    WANg Active Member

    Joined:
    Jun 10, 2018
    Messages:
    494
    Likes Received:
    190
    If you are familiar with the Juniper Networks side of things, JunOS is really nothing but FreeBSD but with its own userland utils and ASICs drivers slapped on top - hell, one of my favorite things to do back in the days is to pull a FreeBSD 7.4 VM image and figure out how to a slap JunOS on top (it's commonly called an "Olive" and used by Juniper geeks to learn to do JunOS stuff before they get their hands on Juniper gear. It made sense when a J2300 was a $500 machine. N0wadays, you can get an EX4200-48 with virtual chassis linkups for less than $150 on eBay)

    As for chassis reuse, yeah, that's old school as well. Ever heard of the old Symantec/Axent Velociraptors? Cobalt Raq 4s with a new coat of paint. Lovely little machines.
     
    #11
  12. BLinux

    BLinux cat lover server enthusiast

    Joined:
    Jul 7, 2016
    Messages:
    2,356
    Likes Received:
    816
    Oh god... that brings back some horrible old memories... i had two jobs where we used Raptor firewall. one was a government contractor and they said that was the only choice since the agency they were working with wouldn't trust us if we used an Israeli product. I was just a consultant, so it didn't matter to me. The 2nd job, I was actually managing the team that handled all the firewalls. Damn thing kept falling over, proxy processes would segfault or consume too much CPU, i tried helping the devs debug the issue, but they weren't making any progress. I ended up building an appliance firewall using Linux/netfilter running in RAM that booted from what folks today call "live CDs" that saved the configs on a floppy. When we got rid of the Raptor, everyone cheered and business unit leaders wanted to celebrate and dump the Sun servers running Raptor into the river. (no, we never did that) Does Symantec even still support that firewall?
     
    #12
  13. gregsachs

    gregsachs Active Member

    Joined:
    Aug 14, 2018
    Messages:
    224
    Likes Received:
    43
    EMC Recoverypoint Gen5 is an intel s2600gz box.
     
    #13
  14. neb50

    neb50 New Member

    Joined:
    Aug 28, 2018
    Messages:
    12
    Likes Received:
    1
    I have found the Dell Compellent SC8000's to be rebadged r720's.

    They include the following and can sometimes be found for <$400 shipped.

    Intel dual 10gbase-t and dual 1gbase-t network daughter board
    iDrac enterprise license
    Dual E5-2640
    64Gb DDR3 - 8x8gb
    Dual internal SD card interface card
    many add in cards for external storage

    You can either add a 8 bay backplane and connectors to use it as a 2.5" drive bay server or buy a new/used r720 or r720xd chassis with backplane and move the parts over at a cheaper cost than a Dell r720/r720xd.
     
    #14
  15. Oflyttbar

    Oflyttbar Member

    Joined:
    Nov 4, 2017
    Messages:
    31
    Likes Received:
    10
  16. gregsachs

    gregsachs Active Member

    Joined:
    Aug 14, 2018
    Messages:
    224
    Likes Received:
    43
    Following up on this, McAfee Advanced Threat Defense boxes are OEM Intel
    ATD-3100 is R1208WTTGSR with dual E5-2609v4, 256gb ram,
    ATD-6100 is R1208WTTGSR with dual E5-2695v4, 512gb ram,
    ATD-3000 is R1304GZ4GC, dual E5-2658, 192gb ram,
    ATD-6000 is R2304LH2HKC, quad E5-4640, 256gb ram.
     
    #16
  17. Evan

    Evan Well-Known Member

    Joined:
    Jan 6, 2016
    Messages:
    2,863
    Likes Received:
    428
    Most appliances I have looked at just have some bios strings that identify what it is rather than any real physical or even other differences. (Often the bios is locked so you can’t change much as well but maybe not locked down too hard, sometimes just go to find the right setting to open it up)
     
    #17
  18. WANg

    WANg Active Member

    Joined:
    Jun 10, 2018
    Messages:
    494
    Likes Received:
    190
    The Velociraptors were EOLed back in '03, if I remember correctly - I should mention that the hardware is solid (AMD K6s) but only if the software side works well (I usually put bog standard Debian or Ubuntu in mine). I am not sure what the Axent/Symantec software stack looks like, but if they are similar to their EPO suite, it probably suck a royal one. I am pretty sure that a modern Raspberry Pi4 will run rings around them.
     
    #18
Similar Threads: Buying appliances
Forum Title Date
General Chat On the fence about buying an HP Z840 Oct 8, 2017
General Chat ShopBLT.com - any feedback on buying Supermicro components? Jul 25, 2016
General Chat Should I bother buying a new router Dec 16, 2015
General Chat Buying Cables in Canada Nov 17, 2015
General Chat Need Help Buying 128GB Ram Server Low Power Feb 14, 2015

Share This Page