HN Explorer

22 comments

[ 3.1 ms ] story [ 60.2 ms ] thread
Lammy
> Other than Oracle with their port to Solaris, most ports of the PF subsystem happened before the OpenBSD 4.7 NAT rewrite, and for that reason they have kept the previous syntax intact.

It’s worth noting that the FreeBSD port has evolved in its own way and is SMP-capable despite keeping the “old” syntax: https://lists.freebsd.org/pipermail/freebsd-pf/2012-Septembe...

1letterunixname
Besides FreeBSD, I'm curious what/which noncommercial, non-Linux OS(es) are battle-tested at internet web ops scale. FreeBSD occupies multiple, nondescript, ubiquitous roles people aren't aware of powering key components of infrastructure in utilities like water, electricity, and delivery logistics
aliqot
OpenBSD, NetBSD, Plan9, Inferno, openVMS
nine_k
How are z/OS, AIX, or HP-UX non-commercial? In particular z/OS is still being developed and sold by IBM.
trasz
>OpenVMS

I suspect by “battle-tested” they didn’t mean World War 2.

(/s of course, and trying out the x86 port is high on my TODO list.)

protomyth
On a serious note, I dearly wish someone had taken the lessons of OpenVMS into the open source world. Its clustering is amazing.
zasdffaa
Could you elaborate/provide a few reading pointers please?
protomyth
https://vmssoftware.com/products/clusters/

We had machines in two buildings with multiple machines in the cluster. You could upgrade machines in a cluster and not lose any time. I thought DragonflyBSD is trying to head in that direction with storage (HAMMER).

trasz
I believe the problem here is business-level, and this can’t really be fixed technically. The problem is, this kind of design requires organized commitment to run it to completion, and can’t work in a culture focused on dropping a half-working MVP early and then failing to follow up.
aliqot
Latest release was 2 months ago.
mburee
As much as i love Plan9, it's in dire need of bugfixes if you're gonna expose it to the net. Last official release was ~15 years ago
sph
Website down?
sph
NXDOMAIN because of NextDNS porn blocklist, for some reason.
peter_hansteen
Yes, some idiot keeps adding the "porn" tag to the site for some reason.

Anyway, the article in question is also available, trackerless and with "classic" formatting at https://nxdomain.no/~peter/better_off_with_pf.html - normally my WIP to show early reviewers spot.

sph
Funny how I mentioned I got an NXDOMAIN from your main host, and your secondary one is called nxdomain.no :)
INTPenis
I stumbled across OpenBSD PF and FreeBSD ipfw early in my career and instantly recognized their superiority. So even though I've been a long time Linux user on the desktop, I always run OpenBSD on routers and gateways. Right tool for the right job.
adrian_b
The same for me, while I use Linux on laptops, desktops and computational servers, I use FreeBSD with ipfw on routers and gateways.