Hello all.
First of all, description of my situation.
My organization have a few public internet IP address and behind NAT we have 400-600 workstations (PC, printers, tablets, notebooks, smartphones and etc.). Speed of network from primary internet provider is 1Gbit synch. For this topology we use Linux server on PC architecture with configured iptables and Squid Proxy for monitoring access and filter denied web pages (facebook and etc.).
But!!
I need more Ethernet NICs for connecting additional VLAN and connect additional Internet providers in case of failure previous one.
I want to move all of this roles to MikroTik RouterBoard http://routerboard.com/RB1100AHx2 .
My dilemma and questions:
1/ Is MikroTik Proxy performance comparable with performance of Squid if I don’t need proxy for caching and need it only for filtering and monitoring accesses?
I don’t want use Squid as dedicated server…if it’s possible.
2/ What additional options I have if I do not want to use proxy anymore? For filtering access to webs, maybe I can use DNS but how can I monitor accesses of users to internet (urls they visit for example) ?