Live data from Hacker News

My OpenBSD Story

blather.michaelwlucas.com

11–20 of 34 posts

Re: My OpenBSD Story

#11

Love this war story. Partially because to a less dramatic extend, I solved a similar situation also with 'traffic shaping' using Linux a year ago. So that's why it resonates for me. I'm not an OpenBSD user but I do respect it's capabilities. I wrote a blog post on how I did it: http://louwrentius.com/how-traffic-shaping-can-dramatically-...

Can someone how traffic shaping reduces latency rather than simply lowering the amount of load required to cause significant latency? I understand that the aim here is to prevent the router from having to queue packets, but by doing this haven't we just shifted the queue and source at which packets are dropped from the router to the Linux box?

The problem is that the router does not drop packets (as soon as a proper traffic shaper does). It queues them up, megabytes at a time. Packets that do make it to their destination take longer and longer to get there (due to waiting in the queue).

Eventually most of the buffered packets are so late that they're considered missing/dropped, though they took bandwidth to send and caused other packets to wait behind them. Then TCP adjusts to a long series of lost packets by dropping the rate dramatically.

TCP isn't supposed to work that way :)

Re: My OpenBSD Story

#12
Should note that this is from (2011), guess it's not an issue as this is a testimonial which is timeless. Michael writes many *BSD flavored books, but my favorite book that every OpenSSH user should have is his "SSH Mastery" book.

http://www.amazon.com/SSH-Mastery-OpenSSH-PuTTY-Tunnels/dp/1...

Re: My OpenBSD Story

#13
I don't understand why the backup option wasn't to boot the one customer whose traffic was killing the company, instead of losing several other clients and going out of business. Yes, try to fix things, and he succeeded, but it seems like he didn't even consider getting rid of the problem customer to save the company.

Re: My OpenBSD Story

#15
post #14

Interesting. Any theories of why this setup was more efficient than the firewall it replaced? OpenBSD just than much better?

OpenBSD is really good for firewalls. It's one of its most popular kinds of install. And very easy to configure.

Re: My OpenBSD Story

#16

I don't understand why the backup option wasn't to boot the one customer whose traffic was killing the company, instead of losing several other clients and going out of business. Yes, try to fix things, and he succeeded, but it seems like he didn't even consider getting rid of the problem customer to save the company.

or even throttling that one client, plugging 10Mbit hub between this clients box and router could do the job as a poor mans bw limiter.

Re: My OpenBSD Story

#17
post #14

Interesting. Any theories of why this setup was more efficient than the firewall it replaced? OpenBSD just than much better?

Better? Absolutely not. Cheaper? Definitely. In his story, however accurate, he didn't have the time to wait, or the money to spend, on a better firewall. OpenBSD has the advantage of being free, and instantly available.

Re: My OpenBSD Story

#18

Should note that this is from (2011), guess it's not an issue as this is a testimonial which is timeless. Michael writes many *BSD flavored books, but my favorite book that every OpenSSH user should have is his "SSH Mastery" book. http://www.amazon.com/SSH-Mastery-OpenSSH-PuTTY-Tunnels/dp/1...

There is also Michael's "Sudo Mastery" book, and like his "SSH Mastery" book, it's full of useful lessons for just about anyone working with UNIX-based systems, including Linux and MacOS 10+.

Earlier this month, Michael gave a talk based on the "Sudo Mastery" book, titled "Sudo: You're Doing it Wrong":

https://www.youtube.com/watch?v=o0purspHg-o

Re: My OpenBSD Story

#19
post #17
post #14

Interesting. Any theories of why this setup was more efficient than the firewall it replaced? OpenBSD just than much better?

Better? Absolutely not. Cheaper? Definitely. In his story, however accurate, he didn't have the time to wait, or the money to spend, on a better firewall. OpenBSD has the advantage of being free, and instantly available.

Maybe I misread, but he had a professional firewall but just couldn't afford the traffic shaping feature.
Post reply on HN