Live data from Hacker News

The Book of PF, 4th edition

nostarch.com

11–20 of 43 posts

Re: The Book of PF, 4th edition

#11
post #9

It's a great book, I used to have some edition of it and it helped me a lot professionally with setting up firewalls, load balancing, traffic shaping and more. I also had a book on Designing FreeBSD rootkits that was very educational. Unfortunately I've given away all my books for more minimalistic living where I am instead dependent on digital information. Not sure how to feel about it.

There are e-readers and DRM-free electronic libraries.

Re: The Book of PF, 4th edition

#12

Lot of admiration for no starch - your books are great !

I buy ebooks straight from publishers like Nostarch and Leanpub. (In fact, I have an older edition of this book). There are a few books that are sold directly by the authors too. All of them DRM-free.

I actively avoid publishers and sellers who don't respect me as a consumer/reader. People need to start demanding better deals, or else we'll end up with monopolies that won't think twice about deleting books in your custody that you purchased from them.

Re: The Book of PF, 4th edition

#13
post #5
post #4

Earlier quoted context omitted.

Yeah. My favorite are books that guide you through implementing complex systems projects from scratch, like Nora Sandler's "Writing a C compiler", or Sy Brand's "Building a Debugger". I wish they produced A LOT more of them.

Those are some new and very very shallow books. There better one's from 90" and 80".

care to name a few such good oldies?

Re: The Book of PF, 4th edition

#15
What's everyone's experience with modern PF in production? Also, not to start a holy war, but what people think about modern PF vs nftables? I've only ever used nftables (and only in fairly simple scenarios) but I've always been curious about the PF side of the world.

Re: The Book of PF, 4th edition

#16
post #5
post #4

Earlier quoted context omitted.

Yeah. My favorite are books that guide you through implementing complex systems projects from scratch, like Nora Sandler's "Writing a C compiler", or Sy Brand's "Building a Debugger". I wish they produced A LOT more of them.

Those are some new and very very shallow books. There better one's from 90" and 80".

much like swimming, it helps to start in the shallow end before you tread into deeper waters.

Re: The Book of PF, 4th edition

#17
post #12

Lot of admiration for no starch - your books are great !

I buy ebooks straight from publishers like Nostarch and Leanpub. (In fact, I have an older edition of this book). There are a few books that are sold directly by the authors too. All of them DRM-free. I actively avoid publishers and sellers who don't respect me as a consumer/reader. People need to start demanding better deals, or else we'll end up with monopolies that won't think twice about deleting books in your cu…

Yarr, that do be a problem matie.

In all seriousness, how has DRM not yet been recognized as the failure it is?

Re: The Book of PF, 4th edition

#18
post #15

What's everyone's experience with modern PF in production? Also, not to start a holy war, but what people think about modern PF vs nftables? I've only ever used nftables (and only in fairly simple scenarios) but I've always been curious about the PF side of the world.

It's slower than nftables.

Re: The Book of PF, 4th edition

#19
post #18
post #15

What's everyone's experience with modern PF in production? Also, not to start a holy war, but what people think about modern PF vs nftables? I've only ever used nftables (and only in fairly simple scenarios) but I've always been curious about the PF side of the world.

It's slower than nftables.

Not to ask anyone for free work but any write-up on this, I'd love to read.

Re: The Book of PF, 4th edition

#20
For me, the decisive factor is readability as a safety mmechanism. When you are debugging a network outage at 3 AM, PF's syntax (pass in on $ext_if...) reads almost like English sentences.

nftables is technically powerful and faster than legacy iptables, but the cognitive load required to parse a complex ruleset is still higher than PF. In an operational context, clarity prevents outages. That alone makes PF the superior choice for edge firewalls where human auditability is critical.

Post reply on HN