Slashdot Mirror


DSL Hardware for Wiring Condos?

Condo-Netwerk asks: "I'm trying to prepare a proposal for my condo building to be our own DSL provider. With 160 units, we should be able to get a T1 and keep the price fairly low. But what's the up-front cost? Which hardware should we use? What do we need to know about Copper Mountain, Avidia, etc. to do our due diligence prior to selecting hardware? I'm also helping a friend spec cabling for a new 30-unit condo building he's putting up; he wants to pull cat5 and split a DSL line from the phone room to each unit. Caveats? Experiences? Is it better to use cat6 or fiber?"

32 of 416 comments (clear)

  1. My advice by wowbagger · · Score: 5, Informative

    Here's my advice, for what it is worth:

    1) Don't put DSL to each unit - pull CAT-5 and run Ethernet. Your residents will have a much easier time getting hardware than with DSL, and your costs will be less.
    2) Pull the wire to a common router closet.
    3) One port per unit
    4) Lock down the ports that aren't being used.
    5) Use DHCP to assign addresses.
    6) Set up your own caching server. I would recommend using Squid.
    7) Force all outbound port 25 (SMTP) through your mail server.
    8) Run a virus scanner on your mail server. Scan all incoming AND outgoing mail.
    9) Don't route the Microsoft file sharing ports or Apple Rendezvous ports between units.
    10) Insist customers keep their machines virus free. Disconnect any who don't IMMEDIATELY.
    11) Write into your rental contracts that you ARE NOT RESPONSIBLE for maintaining your customer's machines or security - if they are scared let them run their own firewall.
    12) Offer your own space, accessible to your users, with virus scanner updates, MS patches, and so on. Encourage them to use that to save bandwidth.
    13) Routinely sniff around for WAPs. Handle them as you see fit - disconnect, or verify they are set up sanely. Don't ignore them.

    Many will disagree with some of my points (esp. 7 and 9). Ask yourself this: do I enjoy being blacklisted for spamming?

    1. Re:My advice by Anonymous Coward · · Score: 2, Informative

      1. Do you have air conditioned closets in each building? (if there are multiple buildings, switched don't like the sweltering heat or biting cold, and they have a fairly low humidity tolerance.
      2. Do you (your apartment complex own the cabeling plant already within apartment? Lots of times the ILEC shows up at the building site and cables the whole complex at no cost to the apartment owners/builders. The drawback is that the ILEC then owns the cabling plant.
      3. How far are the runs between each building? Will you have to run fiber? If so, will you need to trench between buildings? Trenching is expensive.
      4. Will you be running cable into each apartment? Will you really? Think about this, are you bonded to handle the loss of property claims when someone complains that their property is damaged or stolen? What do yo think about wiring companies now? Ours took over a year to complete a three month job.
      5. Want to go wireless? Really? Plan to use that public 2.4 Ghz range? The 5.125 one? really? What Does a wireless access point for your type of application cost? (Hint: not the same as one from BestBuy!) Do you want to use licensed spectrum? Really? How much will that cost?
      6. Who will do the day-to-day administration? Really? Who is on-call at 3am when the T-1 goes down and bubba can't get to his p0rn, I mean, cnn.com? What other services will you need to provide? DNS, DHCP, Email? Outsourcing DNS? Really?
      7. What will you use as a Network operations center? that storage room in the main office? Is it cooled properly? DSL equipment generates a lot of heat, so do servers and switches. Is the room cooled? Will the room meet spec for firecode? Is there enough fire supression in the room?
      8. Who is going to buy this equipment? Is it a business partnership, or will you start an incorporated company? Who will reimburse you for your time?
      9. How much are your subscribers willing to pay? Will it be enough to cover the cost of the initial build out?
      10. How many of your neighbors own computers? How many of them subscribe to AOL and don't want to change? of the ones that are left, how many already have broadband connections? Of the ones that are left, who is sticking with dialup because it's cheaper? Can you continue to operate with the (really, 10-15%) who will be your subscriber base?

      Please don't do this. Don't think about doing it yourself. Get together with your neighbors and negotiate with your local cable provider to get better rates on cable access. Let them have the headaches and the late nights. It sounds like fun, it probably would be, but it will destroy you.

  2. Re:Why DSL? by raider_red · · Score: 4, Informative

    I'd agree with this comment. With DSL, you'd basically need to set up a telephone switching office on sight. As an alternative, you can set up an all ethernet system where everything is connected via router to the T1 line, or you can set up several wireless access points and hook them up to the same router, and save a lot of trouble running a CAT5 cable to every unit.

    --
    It's good to use your head, but not as a battering ram.
  3. A Powerline Comm possibility by buzban · · Score: 2, Informative

    I know the nice guy who runs Telkonet Communications, and I think they have a good product. If you're condo runs three-phase power, it's a good possibility.

  4. Wiring for Ether Expensive by shylock0 · · Score: 4, Informative
    If I understand the original post, wiring for ethernet, at least in his 160 condo set-up, would be extremely expensive: depending on the geographical distribution of the condos, installing Ethernet could be on the scale of hundreds of thousands of dollars. I recently helped consult with a University who wanted to upgrade all two dorms from 10bT to 100bT, and rewire with Cat5e. Just rewiring -- conduits already dug and easily accessible, mind you -- was going to cost them $50,000-$80,000 for two hundred dorm rooms.

    Anyway, the advantages of DSL should be obvious: no new cable needs to be laid. You can just install the DSL equipment at the central phone switch of the condos, and then give each resident a DSL modem. Much simpler, much cheaper.

    But I agree -- a T1 isn't going to cut it for 160 heavy users. If you only expect moderate use, you might be able to squeak by. I'd combine multiple T1s (better redundency) or spring for a T3 (nominally cheaper per megabit). The choice is yours.

    -Shylock

    --
    Statistically speaking, there's a 99.998% chance that my IQ is higher than yours. Get over it.
    1. Re:Wiring for Ether Expensive by philtre · · Score: 2, Informative

      As far as wiring goes, I do it when other business is slow and 200 dorm rooms with the setup you described should have been 20,000 dollars maximum. That university got ripped off really badly. I charge $100 a drop in an office environment and I'm only middle of the road for prices in my city. The lower cost companies do volume and have crews that only pull cable. They can sometimes underbid with $75-90 per hour. I think somebody was getting a huge kickback... -p

    2. Re:Wiring for Ether Expensive by afidel · · Score: 2, Informative

      They were getting ripped. Blackbox will typically charge ~$100 per drop. $100x200=$20,000 plus some additional costs, but still should be less than half what you quoted. With DSL bridges running around $100 and DSLAM's running several timer more per port then even managed switches and you will probably save by going Cat5. Also for 160 users I would say 2 T-1's would be a minimum, personally I would go with 3 burstable T-1's, most of the time they cost the same as 2 full T-1's but they bandwidth is there for peak usage.

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
  5. umm you're gonna need more than a T1 for 160 units by athen66 · · Score: 2, Informative

    Say you throttle each unit to 128/128, that's gonna require a 20.5mb/s pipe. So you're better off getting a frac DS3. A 20m DS3 is about $10k/mo. So divide that by 160 units and it's gonna break down to about $62.50/mo per unit. The last I checked, you could get a 128/128 DSL line for about $30/mo. Doesn't seem cost effective to me.

  6. too tight, ditch the extra M$ work. by twitter · · Score: 4, Informative
    Cat 5 is a good idea, but you might provide your neighbors with more than DHCP if you can. The single port - non routable address thing would suck for anyone who wants to use more than a single computer or serve content. "locking down unused ports" and forcing all outbound SMTP though your own mail server is equally obnoxious. What you would be providing is a faster browsing experience for a single user in each place rather than Internet Service. That's a terrible waste of a T1 or whatever your upstream service is.

    It's amazing how far out of their way people will go to support Microsoft's crap. More than half of your list is Microsoft specific. Realize also that #10, " Insist customers keep their machines virus free. Disconnect any who don't IMMEDIATELY." eliminates the need for most of the other M$ virus precations, especially the silly M$ patch server which could get you a BSA visit. Why bother when you could recomend Linux or a Mac?

    All small ISPs are going to be blacklisted by AOL/MSNBC regardless of how well or poorly you treat your users.

    --

    Friends don't help friends install M$ junk.

    1. Re:too tight, ditch the extra M$ work. by wowbagger · · Score: 2, Informative

      I never said "Only one IP address per port" - if they want to hang a hub off the port and hook up multiple machines they can.

      I never said "Non-routeable addresses" - I simply said filter certain ports that have no business going beyond one unit.

      By "locking down unused ports" I meant PHYSICAL ports, not IP ports - as in "If Joe hasn't signed up for it the RJ-45 in his place is dead."

    2. Re:too tight, ditch the extra M$ work. by freeweed · · Score: 4, Informative

      It's amazing how far out of their way people will go to support Microsoft's crap. More than half of your list is Microsoft specific.

      How'd you come up with this? Only one thing even mentioned Microsoft, and also mentioned Apple in the same breath. Let's see:

      1) Don't put DSL to each unit - pull CAT-5 and run Ethernet. Your residents will have a much easier time getting hardware than with DSL, and your costs will be less.

      OS independant.

      2) Pull the wire to a common router closet.

      OS independant.

      3) One port per unit

      OS independant.

      4) Lock down the ports that aren't being used.

      OS independant.

      5) Use DHCP to assign addresses.

      OS independant.

      6) Set up your own caching server. I would recommend using Squid.

      OS independant.

      7) Force all outbound port 25 (SMTP) through your mail server.

      OS independant.

      8) Run a virus scanner on your mail server. Scan all incoming AND outgoing mail.

      Ok, *most* viruses are Windows-based. Most != all, however.

      9) Don't route the Microsoft file sharing ports or Apple Rendezvous ports between units.

      Again, mostly a Microsoft issue.

      10) Insist customers keep their machines virus free. Disconnect any who don't IMMEDIATELY.

      Remember, there are viruses for every platform out there.

      11) Write into your rental contracts that you ARE NOT RESPONSIBLE for maintaining your customer's machines or security - if they are scared let them run their own firewall.

      OS independant.

      12) Offer your own space, accessible to your users, with virus scanner updates, MS patches, and so on. Encourage them to use that to save bandwidth.

      There have been an order of magnitude more patches for my RedHat box this past month than for all versions of Windows combined. And most Windows patches have little to do with viruses, although many of these vulnerabilities do end up being exploited by worms at some point.

      13) Routinely sniff around for WAPs. Handle them as you see fit - disconnect, or verify they are set up sanely. Don't ignore them.

      Has nothing to do with what OS people run.

      Of course, this doesn't even touch on the fact that the reason people spend so much time supporting Microsoft products is that Windows/Office/etc are 90%+ of their respective markets. Duh, you kind of have to. It's all fine and dandy to be an OSS zealot, but when you're trying to provide a service to people, it's rather impractical to just say 'run what I tell you to run'. That sort of thinking is why we hate Microsoft in the first place, remember? :)

      --
      Endless arguments over trivial contradictions in books written by ignorant savages to explain thunder in the dark.
    3. Re:too tight, ditch the extra M$ work. by Zathrus · · Score: 4, Informative

      but you might provide your neighbors with more than DHCP if you can

      Why? They can use NAT. You probably are... or are you actually going to get a class C subnet for your condo association? I wouldn't bother - it's not worth the time and money.

      It does screw anyone trying to serve content, but I'm not sure that I'd care that much.

      More than half of your list is Microsoft specific.

      Uh... no it wasn't. There were 3 points that could be considered MS specific (8, 10, 12), and I'd dispute #8. There are Mac and Linux viruses out there. If either becomes a significant user base then there will be far, far more.

      No, 7, 9, and 11 are not MS related. Number 7 deals specifically with spam. Number 9 is basic security and privacy. Number 11 is true regardless of OS -- or have you never heard of script kiddies and rootkits?

      The patch server wouldn't get them a BSA visit either, you're allowed to redistribute patches.

      In any case, welcome to the Real World, where 95% of all systems will be Windows. If you don't take precautions against that then you're just an idiot.

      Less zealotry, more reality.

  7. Re:T1? Is that all? by SuiteSisterMary · · Score: 3, Informative

    Ah, but a T1 is guarenteed bandwidth, and will have service level agreements in place.

    --
    Vintage computer games and RPG books available. Email me if you're interested.
  8. My Apartment by Globe199 · · Score: 4, Informative

    My apartment complex is its own ISP. They installed ethernet in their buildings in 1996, starting with two T-1 lines.

    With approximately 1000 total residents for all the buildings, this setup worked fairly well at first because not very many people had computers that were network-ready.

    Around late 1999, the network began slowing down. A year later, streaming video was impossible, and by late 2001, I was better off using a dialup. It was BAD.

    About a year ago, they added two more T-1s, and it's been smooth sailing since. There are about 400 people in my building, maybe 500 in the next, and 100 or so in the other places. The network is almost always fast. Obviously this is due to adding the extra bandwidth. One can assume that the user-base has reached its saturation by now (almost everyone has a computer with a NIC, since it's a student-oriented place), so they probably won't have any more speed problems.

    They banned Kazaa and Morpheus, and apparently that helped. They don't give you an e-mail address or server space. They simply provide network connectivity. It's actually not a bad deal -- at $100/year, it's as fast an any cable modem or DSL connection.

    I think two T-1s would probably be alright for only 160 units. And I might recommend Cat-5E wiring. We just rewired my work's building with about 500 data ports, using 5E. Everything is gigabit ready. Sure, 100-base-T is fast, but are you gonna want to rewire the whole damn place in five years when you want gig? Probably not. It cost us $120,000 for those 500 data ports and about 300 voice ports. Plan ahead!

    Globe199

  9. Combo 10/100/1000 + fiber by Charcharodon · · Score: 5, Informative

    Check out Dlink's site. You can wire the individual buildings with 10/100 and then use fiber to connect them to a central router for the T1. The prices are down in the range of reasonable for the switch that have 10/100 and a pair of fiber ports. You'd have plenty of speed and distance wouldn't be much of an issue.

    1. Re:Combo 10/100/1000 + fiber by luzrek · · Score: 3, Informative
      Also the limitations on ethernet (distance and number of hubs) are between switches and routers. If you get too far from the previous switch, just put another one in. Certainly, one switch per floor would do it.

      As a side note, if you are going to wire the whole building together with ethernet, you probably want to do some degree of electrical issolation between units. It would really suck if one power surge took out all the networking equiptment and all the computers in the building. Certainly the minimum should be fiber optics (instead of copper wires) between the switches.

      --

      Galium Arsenide is the material of the future, and always will be.

  10. Re:Why DSL - Ethernet? by pyite · · Score: 2, Informative

    Huh? You don't know what you're talking about. DSL is usually provided over an ATM connection for one thing. DSL is not a type of Internet connectivity. It is a type of network connectivity, the Internet never has to be involved. Ethernet is a layer 2 protocol that can run over a variety of layer 1 media. Ethernet over fiber is probably about as versatile as you can get in an environment like this. Copper will work just as well and cheaper if the condos are close enough together.

    --

    "Nature doesn't care how smart you are. You can still be wrong." - Richard Feynman

  11. One Cat5 caveat: Spring for "plenum" rated wire. by Ungrounded+Lightning · · Score: 3, Informative

    I'd just say go the simple and tried and true route w/ cat 5. I mean...come on, can you go wrong with cat5?

    I agree totally with those suggesting using 100 Mbps Ethernet over Cat5. That's definitely the way to go. (Use DSL only if your condo is a subdivision rather than a building.)

    One caveat: If the Cat5 is run in anything other than conduit - especially if it's run in an air duct - spring the extra bucks for "plenum" rated wire. In a fire the ordinary stuff may emit toxic gas. Plenum-rated wire is designed to retrofit old buildings by stringing it through the air ducts, and uses a more expensive plastic that does NOT emit toxic gas (or nowhere near as much) and also doesn't spread fire.

    One other item: Check what your building's phone system is already wired with. There may already BE a 4-pair cat5 or cat5e to each unit. And if the phone company's demark point is the phone closet rather than the unit's phone junction box you folk OWN the wire. So if a unit has any two pair free you can use 'em and not have to string new stuff.

    Note that 10/100 ethernet only uses two of the four pair in the bundle. Traditionally it's pair 2 (white/orange) and 3 (white/green), leaving 1 (white/blue) and 4 (white/brown) free for other things - such as a second ethernet drop, one or two phone lines, or power distribution to distant hubs and/or low-power equipment.

    But the pair are all the same (except for the color code). So you can use any two pair for the ethernet feed, and sort it out at a junction at the far end. You can generally splice 'em if you're careful to keep the lengths of the two conductors in the pair equal and twist 'em back together afterward. (Don't sweat getting the twist rate to match exactly. Just avoid having a big untwisted gap with the wires hanging apart.)

    Run one drop to the unit and have the unit's owner add a hub (or his own firewall machine) if he wants to run more than one box.

    --
    Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
  12. Re:Does everyone want it? by dracocat · · Score: 3, Informative

    You would be surprised. I lived in a 50 person condo that bought a 3Mbit DSL and ran Cat 5 to each apartment. There was NO tech support, just a one page pamplet telling you how to setup DHCP.

    cost per unit = $100 / 50 = $2 per UNIT.

    Downside: if it went down there was nobody to call, it would take the person in charge a day to figure out that it was down and get around to fixing it.

    Upside. Did I mention it was $2 a month? Well actually it was free. The condo board was able to do it without raising the HOA fees. So my out of pocket expense was $0 a month.

    If someone absolutely had to have an Internet connection I suppose they could have bought a cable modem. Then they would always have two options to connect to the Internet.

    What I don't understand is why you want to become a DSL "provider". Are you really planning on charging each tenant a monthly fee if they want this? You will be adding so many more expenses! Just buy the DSL and share it, don't make a business out of it!

    So my steps are:
    1) Buy DSL
    2) Share It with CAT 5, Wireless, whatever you want
    3) Pay a resident who will be using it a lot $100 a month to keep it up. (Not to support idiots, just to make sure the network stays up). If residents need help they can independently pay him money or another neighbor that is smart enough to set it up.
    4) Pay for it with HOA fees, don't add extra billing and other overhead. Just treat the DSL as your HOA probably treats Water, and Cable TV. (You DO have a bulk rate with the cable company, right?)
    5) Do not try and start a DSL provider company on the side of the HOA. The HOA's purpose is to serve the residents, not to start making money off of them.

  13. Re:Why DSL? by bryanp · · Score: 2, Informative

    With 10/100 Ethernet, the max cable length is around 100m. I seem to remember that restricting the speed to 10 Mbit triples the max cable length, but that bit of data is suspect.

    The 100 meter limit has nothing to do with ethernet. That's the limit for the Category 5 specification. If your cable run happens to be 10 meters longer than the spec allows then when you hook up a tester it could very well pass every single test except for cable length. It might very well be quite capable of running 100Mb ethernet with no problems whatsoever. It just can't be certified as Cat5.

    --
    "An unarmed man can only flee from evil, and evil is not overcome by fleeing from it." Col. Jeff Cooper
  14. Our Condo Experience by sunbane · · Score: 2, Informative

    We have our condos all wired with cat 5e individually pulled to every room (enough to do two phone lines and your ethernet to every room). We went through a third party group that took care of the wiring as the units were built and manages the connection for us... we basically have 150 units and one shared T1 line. We have a little box on the outside of each condo building with a little hub (you don't have to worry too much about bandwidth so go cheap - T1 is not going to give you gigabit speed!) with a lock to keep people out.

    For the most part, it is quite adequate - downloading the latest Matrix trailer or a couple mp3s can't be beat... in non peak (evenings and weekends) periods the bandwidth is quite plentiful. You will get the occasional abuser though (you'll want the ability to sniff out who is doing major downloading) and you'll also run into people misconfiguring their hardware so you'll get a rogue dhcp server or two going you have to track down (have to admit, my little linksys box got carried away one time!)

    An added bonus is that with a T1 you usually get a bunch of static ip addresses available too, so those that have requested it in our complex have had their wish granted.

    Overall, we pay $15 a month on our HOA dues for this access - pretty good deal. We are actually requesting (and we'll probably get it down the road) a second T1 line as well - as the costs come down it is even more economical. We also get directtv services through the same 3rd party - those that don't pay their hoa dues get their net and tv turned off - good incentive to keep people paid up too! :) (And we get a discount on directtv for a large group as well)

  15. Re:Why DSL? by funaho · · Score: 2, Informative

    Buy a decent Ethernet switch (like a Cisco Catalyst 3500 series) and set up VLANs. As a bonus with this setup you can also turn people's access on and off by just telnetting into the switch and doing a shut/no shut on the port. Plus you will be able to graph everybody's traffic and find that warez site set up on some poor person's hacked windows box that's sucking up the whole T1. :)

  16. A couple of ways to do it. by NerveGas · · Score: 2, Informative

    First, forget DSL. It simply isn't reliable enough. Being out of connectivity is bad enough, having 100+ people mad at YOU because they're out of connectivity is even worse. Use a t1, multiple t1's, or a t3.

    Here's the easy, cheap way to do it. Go over to ebay, buy yourself a Cisco 1720 with a Wic-1T-DSU card in it. Your t1 plugs into the WIC card, and ethernet port on the router plugs into your switch. You'll be able to do bandwidth limitting and port filtering as well.
    From there, the only question left is the distance involved to the condos, which would dictate the structure of the ethernet design.

    There are a few flaws with that design: First, with everyone on the same L2, there's no end to the mischief that someone can cause. Second, virii capable of exploiting the "network neighborhood" will spread like wildfire.

    If you want to do things a bit better, put a firewall/router in each building, and wire those back to your central distribution switch. The "router" can be a $40 machine from the thrift store, with a couple of 4-port ethernet cards in them. Each ethernet port can be on it's own subnet, with appropriate firewalling on a *per port* basis. That will help you prevent lots of accidental and intentional problems that can crop up.

    Of course, with 160 units, 1 t1 is pretty small. That only guarantees each unit about 10 kbits/second, which is lees than a 14.4 modem. Of course, not everyone is going to be on at the same time, but even if 1/10th of the people are on, that only guarantees them about 100 kbits/second.

    When you also look at the fact that some people will use as much bandwidth as possible, then it gets even harrier. Let's say that you can each individual's bandwidth at 256k, with bursts to 512k. That means that it only takes 6 people downloading ISO's, using their favorite P2P app, watching streaming porn, or anything else to really make the connection suck for everyone.

    Shop around, and see if you can get a good deal on a larger connection. Not long ago, I was offered a full DS3 (45 mbits/sec!) from Broadwing for $6k per month. While $40 per month might sound high on a per-unit basis, remember that would *guarantee* 768 kilobits per resident! There are very few places you can get that sort of *guaranteed* bandwidth for $40 per month *anywhere*.

    steve

    --
    Oh, you're not stuck, you're just unable to let go of the onion rings.
  17. Re:Why DSL? by Pii · · Score: 3, Informative
    I hope it's not too late to whore some karma... This is the first chance I've had to log in today.

    The answer to this problem is Layer-3 switching, and VLANs.

    Put every apartment unit on it's own VLAN, and at the Core, use access-lists to prevent each VLAN from accessing it's neighbors.

    The hardware costs are nominal, as you only need one Layer-3 enabled device at the core, and the access layer switches can be fairly modest. In Cisco-speak, each VLAN interface would look like this, and the attached access-list would prevent Inter-neighbor traffic:


    int vlan 51
    ip address 192.168.51.1 255.255.255.0
    ip helper-address 192.168.0.10 (Centralized DHCP Server)
    ip access-group 100 in
    !
    !
    access-list 100 remark ------------
    access-list 100 remark Inter-neighbor Filtering
    access-list 100 remark ------------
    access-list 100 remark Allow access to the Infrastructure Network DHCP-DNS-Mail-WWW
    access-list 100 permit ip 192.168.0.0 0.0.255.255 192.168.0.0 0.0.0.255 (Infrastructure Network)
    access-list 100 remark ------------
    access-list 100 remark Deny access between Neighbor VLANs
    access-list 100 deny ip any 192.168.0.0 0.0.255.255 (Denies all other Internal Routing)
    access-list 100 remark ------------
    access-list 100 remark Allow everything else...
    access-list 100 permit ip any any
    access-list 100 remark ------------

    Since I'm a Cisco bigot by trade, I'd recommend a Cataylst 3550 (w/the SMI image) as the core device, and Cat 2900XLs at the access layer. Use fiber between the closets as others have suggested.

    I'd also recommend giving each unit it's own static NAT/PAT translation outbound to the Internet, so that if something illegal should occur, you can determine that unit that originated the trouble. No sense getting everyone in trouble (Certainly not you!) for a single troublemaker.

    --
    For those that would die defending it, Freedom
    has a sweet taste that the protected will never know.
  18. Re:Why DSL? by KnightElite · · Score: 2, Informative

    Agreed. Run Cat5 Network cable and get 10/100 Base-T ethernet to all the rooms. The other thing I have noticed, is that a T1 will probably not be enough bandwidth.... unless you are very strict on monitoring usage of Kazaa and other file sharing applications. I'm the network admin of a 50 room residence at the University of Saskatchewan, and we're currently running the whole building off a 640kbit up/ 3Mbit down DSL line. It works quite well... as long as no one uploads excessively. Given that a T1 has less bandwidth, especially on the downstream, you might want to look into a slightly beefier connection, or the pings might shoot up rather hihg.

  19. Marginally Off-topic Suggestions by suwain_2 · · Score: 3, Informative

    This doesn't pertain to whether you should use DSL or Ethernet, but rather is a few things I've always thought ISPs should do. (I've had this almost life-long goal of starting an ISP for some reason...)

    I own a domain, and use it primarily for the unlimited mail aliases. Every site I go to gets sitename@mydomain.com, which just forwards to my main address. If they start spamming, I can tell exactly who it is, and redirect (or block entirely) the mail. Why not give each customer a subdomain (customer.condo.com) where they get, say, 5 POP boxes, but unlimited aliases? Used effectively, this could *really* fight spam. (This is venturing more offtopic, but Cpanel seems to be the most popular web-based control panel; you could provide customers with some webspace and e-mail access. It's easy to use, but even great for geeks. You can get licenses for like $40/month, or possibly less.)

    Another thing I've always thought ISPs should offer was NAT access. Rather than getting an external IP, they'd get an internal one and use your proxy. It'd save you from needing as many IPs, and it gives them great security -- unless you go out of your way to set it up, no one can connect to them. Of course you shouldn't force this upon people, but some people might *want* NAT. Offer it as a 'privacy' plan. (Heh, you could probably even charge extra, lol)

    Something like Squid could really speed things up, especially if you only have a T1.

    The last "If I ran an ISP..." item regards DNS. Maybe it's because Adelphia is so crappy (they have like 5 DNS servers, and whatever you have as primary ALWAYS goes down, so you're re-ordering the nameservers several times a week to make it work at all...), but I ended up using OpenNIC, which essentially is a 'democratic' TLD assigner; they have a lot of new TLDs not supported by 'real' DNS. (And, of course, lookups for regular TLDs work, too.) Not sure if you want to make it standard, but I'd be way impressed if an ISP gave me the choice of 'regular' DNS or OpenNIC DNS servers to use.

    Oh! Don't forget to do your part and setup a good firewall. Another seemingly uncommon thing I've always thought ISPs should do was to do *good* egress filtering: filter traffic *leaving* your network too. I start to rant about this idea every time I read about a big DoS attack; if ISPs were more careful about what leaves their network, a lot of DoS attacks would simply get dropped at the attacker's ISP.

    --
    ________________________________________________
    suwain_2 :: quality slashdot p
  20. DSLAMs are cheap and plentiful! by isdnip · · Score: 4, Informative

    First off, I do this type of thing for a living, as a consultant to the CLEC and ISP trades, so I know a thing or two about the DSL market. Please, please, ignore the consensus of the Slashdot crowd who want you to pull Ethernet! They imagine that they'd want the better speed, but as a provider, you have to face reality. DSL has real advantages:

    1) It lets you control the top speed. I suggest that the top speed to a user be less than half of your feed speed. A company I work very closely with has almost 200 DSL lines in a luxury condominium. They feed it with only two T1s. That's quite adequate! They have to pay for that bandwidth -- backbone ISP service isn't cheap, and the T1 loops into the condo aren't free either. Of course they only provide 700 kbps service. Sure, people might like more, but the competition is dial-up, and price matters.

    2) DSL tolerates long wire. It can go a few miles, after all -- even a sprawling condo complex is a short hop for DSL. Ethernet tends to be pickier.

    3) ADSL can share wire with telephone. You might be able to piggyback onto the phone wire. (A CLEC can; whether you can is a different issue.)

    4) DSL is cheap! Lots of providers tanked, leaving good working gear on the secondary market. A 500-line Lucent Stinger can be had for $12k; a 200-line ADSL DSLAM is maybe half that. SDSL needs its own wire pair (can't share phone like ADSL) but the DSLAMs are a glut on the market, much cheaper than even that. Check eBay, telephone.com, etc.

    I'd be happy to talk more about this offline (isdnip at netscape dot net)....

  21. Re:Why DSL? by Cramer · · Score: 2, Informative
    Ok, you are obviously talking out your left butt cheek...

    • As for IP Address space...
    IP address space isn't free (for anyone!) ISPs (subject to ARIN) MUST provide "detailed" justification for assignments of /24 or larger blocks to end users. I work for an ISP. I go through this shitty processes several times a year. I know very well what goes on w.r.t. address allocations. Yes, you get address space from your ISP. For a fee. As long as you can justify the allocation. (160 condos is far too small for a direct assignment from ARIN.)

    • You can add $50-$100 to the monthly rent...
    Any place tacking on an extra 50 to 100$ in rent for shared access to a T1 is not going to be my place of residence. There are better, faster solutions available (maybe not for these 160 condo's... I don't know where they are.) And it's not like people will not notice rent here is 100$ higher than down the street.

    • Bandwidth isn't that expensive...
    Oh good God. If you hold any form of network related certification, please return it. "Buy in bulk"? This ain't mayonnaise, boy. This isn't 1995 either. The cost of 1U of colo space for your router will run more than the T1 you want brought back to the condos. Gee, how does two routers + T1 between them + colo rack space + colo connectivity and bandwidth cost less than one router and a T1 to some ISP? (Answer: it doesn't, and never, ever will.)
  22. Re:Why DSL? by Pii · · Score: 3, Informative
    Wow!
    "I work for an ISP."
    So tell me... At this ISP where you work... Do you have to empty all of the wastebaskets every day, or do you just do certain "high-traffic" recepticles daily, and visit the individual cubes two or three times a week? Also, how long does it take?

    Let me explain some bandwidth math to you, since you haven't managed to pick any up at your day job.

    Obtaining a T-1 Internet connection to a Tier-1 ISP (Not some low rent ISP 6 AS hops away from MAE-East) costs in the neighborhood $1200 - $1500 per month.

    Now, obtaining a Point-to-point T-1, intra-lata, costs around $295 per month; maybe a little more or less depending on the carrier.

    If I purchase 100Mbps service at a co-lo, with no traffic metering, and a rack space, I pay a lot, but I can support 70 T-1 connections without any over subscription(!).

    So do some math...

    In my other posts, I specifically addressed using multiple T-1s, which again, is a lot more expensive when the other end of the circuit terminates at a Tier-1 ISP than when it terminates at your own equipment. So the equation is not "$100/month for 1/160th of 1.5Mbps." It's "$850/month for Rent" vs. "$950/month for Rent, and Free High-speed Internet."

    You, as the renter, have no idea what I'm charging you for the Internet access. It's a hidden cost...

    "Yes, you get address space from your ISP. For a fee. As long as you can justify the allocation. (160 condos is far too small for a direct assignment from ARIN.)"

    Who said anything about getting address space from ARIN? I'm talking about getting it from an upstream provider... And it's dirt fucking cheap, when you're turning around and collecting $1200/year for each address.

    Lastly...

    ""Buy in bulk"? This ain't mayonnaise, boy. This isn't 1995 either. The cost of 1U of colo space for your router will run more than the T1 you want brought back to the condos. Gee, how does two routers + T1 between them + colo rack space + colo connectivity and bandwidth cost less than one router and a T1 to some ISP? (Answer: it doesn't, and never, ever will.)"

    I'll try to remember that as I wander up and down the butt-empty co-location facilities here in the Northern Virginia/Dulles Corridor area...

    My co-lo rack can service a lot more than 1 T-1 connection... It's called economies of scale. You should read a book some time.

    You almost have a point... Yes, 1 rack at a co-lo, plus 1 T-1, to 1 remote locations would be far more expensive than a single T-1 connection to an ISP... And it may indeed always be that way...

    But 1 rack at a co-lo, plus 15 T-1s, split across 5 remote locations is a far cry cheaper than 15 T-1s to ISPs.

    And with the markup at the customer end, you can see why this would make money.

    Of course, with all of your "I work at an ISP" experience, you might not be aware that making money is the point of the business in the first place.

    --
    For those that would die defending it, Freedom
    has a sweet taste that the protected will never know.
  23. Support, NAT and the Future by AndyBarrow · · Score: 5, Informative

    Here are my 2 cents worth. I've been in and around this stuff for 26 years (and yes, I do have, what used to be prematurely, grey hair):

    1. Put in CAT5, or even CAT6 if you can afford it. Put in twice as much as you think is reasonable. Get it certified and tested. Next time you think you need just those couple of extra pair, you won't regret it. The big hit in any infrastructure installation is labor - you are going to spend about as much for labor to have two CAT6 cables pulled in to a jack as you would pay to have one CAT5.

    2. NAT would be a pain in the ass for your users if they want to do anything more complex than web browsing and mail. This sounds like a multi-year project - what do you think people are going to be doing with the Internet in two years? Doing SIP telephony, H.323 multimedia, etc. etc. through a NAT connection borders on impossible for an average user.

    3. No matter what you think the skill level is of your users, cut it in half. People seem to get dumber than dirt when they get home at night. I have personal experience - I'm living in a residential compound in Kazakhstan right now. I spend my days working for the Man, nights dealing with residents who stuck floppy disks to their fridges with magnets.

    4. All the cool stuff like web cache, proxy servers, even community web sites are very nice. With every single item, just think about who is going to support those things after you make your fortune and move to a grass hut in Tonga? KISS in all things.

    5. On the subject of support - residents are 24/7/365. When the Smith family can't have that video conference with Grandma on Christmas morning, who they gonna call? Set up a well understood service level agreement that every resident signs. Make it simple, but clear. The rule of thumb is that if it can be explained in an elevator between floors, it's about right.

    6. Fiber isn't that expensive, and there are some cool devices available now for doing lots of fun things with it. Investigate using it for house distribution. In 5 years when those 2mb DSL connections become passe', and folks start wanting those 10-20mb connections, they will look at your portrait on their mantle and smile.

    7. Here's a turnaround for you: Have you thought about cable modems? Not only can you do a few channels for high speed data, you can also do digital TV distribution, and telephone distribution. What if the folks had a TV channel for the community front gate, so they could see when the mother-in-law is coming?

    Have fun - this if obviously a passion for you. On those all-nighters when you are trying to solve some stupid routing problem, remember it was YOUR idea.

    Andy

    --
    "You can't have everything. Where would you keep it?" -- Steven Wright
  24. Happy to help by nukedesign · · Score: 2, Informative

    Check out Ciscos Long Range Ethernet (LRE) products also look into tutsystems, these two solutions will help get you started. if you are planning to do this make sure the phone company terminates in a phone room and you will be responsible for all phone lines to the condo's shoot me an e-mail and I will be glad to help in any wau I can, I designed a system for a 3500 space RV park (funding did not work out) but then again the ISP business is pure hell. any one out there who would like my take on these systems may e-mail me at nukedesign@hotmail.com if i get /. ed my mailbox may overflow.

  25. Re:Why DSL? by Cramer · · Score: 2, Informative
    • I'll try to remember that as I wander up and down the butt-empty co-location facilities here in the Northern Virginia/Dulles Corridor area.
    And while you're wander around there, tell me why it's so freakin' empty if your method is the most economical solution? I'll save you the time: it isn't the most economical solution. I see you've studied at the feet of RIAA and MPAA ("Statistics: How to Lie With Truth")

    • So do some math...
    Maybe you should. (Or maybe your calculator needs new batteries?) If you're willing to spend money you don't have to, you're not going to be in the ISP business very long (if at all.) You've provided ZERO costs for co-lo, but gleefully throw around T1 prices which are guesses and not valid 30 day quotes. (Tier-1 providers don't have set prices. They negotiate the price. As such, the price of my UUNet T1 may be very different from the cost of your UUNet T1 despite both of them going to the same office.)

    In the case of these condos, if they are out of range for DSL and cable modem service, then they are very likely a long way from a colo facility or tier-1 ISP. T1 pricing is distance based (among other things.) That 300$ p-t-p T1 is (a) very short (a few dozen miles), and (b) completely contained within a CLEC's network. RBOC's will charge every penny they are allowed by law (and sometimes more.) CLEC's have a very good record of ignoring the tariffs where possible to offer "cheap" solutions because it really doesn't cost as much as the tariff was built to cover.

    Co-lo space isn't cheap. Especially for the type of crap you're suggesting. RackSpace.com isn't going to be thrilled to know you're using them as the upstream ISP for your condos. A colo facility with good connectivity is not cheap (and you are adding 2 hops to get to that tier-1.) Unthrottled and unmetered connectivity is very much not cheap (read: fucking expensive.)

    BritSys lists 1U for 125$/month metered to 1Mbit/s. Bandwidth is 100$ per additional Mbit. Address space adds to that, but I didn't look for any numbers. That'll run $225+/month for one T1 plus the cost of the p-t-p T1 which, crossing a lata and maybe state line(s), will be twice your $295 figure or more. So, for around $800-900/month, you have a tier-2 or tier-3 internet connection that costs twice as much to setup and maintain. It's cheaper and easier to get an "internet T1" straight to a tier-2/3 provider. (If you're buying p-t-p connections from the cheapest source, why not be frugal in purchasing internet connectivity? After all, if "making money is the point" then needlessly spending money is a no-no.)

    (And for the record, our own p-t-p T1s ("private line") are priced as "ICB" -- individual case basis -- which is sales-speak for "how much ya' got?" Greater than T1 and colo are also "ICB", however "colo" doesn't include an ethernet port. Internet T1 via frame ranges from $600-800 or $300-500+loop (colo loop = zero.) An additional /24 is $85 with acceptable justification. We are a "tier-2" provider.)