A Few of My Favorite Things About the OpenBSD Packet Filter Tools

https://bsdly.blogspot.com/2022/09/a-few-of-my-favorite-things-about.html

by somat • 4 years ago

81 22 4 years ago

bsdly.blogspot.com

Lammy• 4 years ago

Other than Oracle with their port to Solaris, most ports of the PF subsystem happened before the OpenBSD 4.7 NAT rewrite, and for that reason they have kept the previous syntax intact.

It’s worth noting that the FreeBSD port has evolved in its own way and is SMP-capable despite keeping the “old” syntax: https://lists.freebsd.org/pipermail/freebsd-pf/2012-Septembe...

1letterunixname• 4 years ago

Besides FreeBSD, I'm curious what/which noncommercial, non-Linux OS(es) are battle-tested at internet web ops scale. FreeBSD occupies multiple, nondescript, ubiquitous roles people aren't aware of powering key components of infrastructure in utilities like water, electricity, and delivery logistics

aliqot2• 4 years ago

OpenBSD, NetBSD, Plan9, Inferno, openVMS

nine_k• 4 years ago

How are z/OS, AIX, or HP-UX non-commercial? In particular z/OS is still being developed and sold by IBM.

trasz2• 4 years ago

OpenVMS

I suspect by “battle-tested” they didn’t mean World War 2.

(/s of course, and trying out the x86 port is high on my TODO list.)

mburee• 4 years ago

As much as i love Plan9, it's in dire need of bugfixes if you're gonna expose it to the net. Last official release was ~15 years ago

pram• 4 years ago

SmartOS

sph3• 4 years ago

Website down?

sph3• 4 years ago

NXDOMAIN because of NextDNS porn blocklist, for some reason.

peter_hansteen2• 4 years ago

Yes, some idiot keeps adding the "porn" tag to the site for some reason.

Anyway, the article in question is also available, trackerless and with "classic" formatting at https://nxdomain.no/~peter/better_off_with_pf.html - normally my WIP to show early reviewers spot.

INTPenis• 4 years ago

I stumbled across OpenBSD PF and FreeBSD ipfw early in my career and instantly recognized their superiority. So even though I've been a long time Linux user on the desktop, I always run OpenBSD on routers and gateways. Right tool for the right job.

adrian_b• 4 years ago

The same for me, while I use Linux on laptops, desktops and computational servers, I use FreeBSD with ipfw on routers and gateways.

A Few of My Favorite Things About the OpenBSD Packet Filter Tools

Related Stories