Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

FreeBSD 13.0 Beta1 Now Available

lists.freebsd.org

Post reply on HN
Print view View original

21–30 of 110 posts

Re: FreeBSD 13.0 Beta1 Now Available

#21

Post by csdreamer7 »

drewg123 wrote: post #9
aduitsis wrote: post #4

Earlier quoted context omitted.

Drew, thank you kindly (and Netflix) for your contributions to FreeBSD. They do not go unnoticed. I, for one, learned quite a few things too out of your presentation, which is here: https://2019.eurobsdcon.org/slides/NUMA%20Optimizations%20in...

Thanks so much. I love that my "war stories" are interesting to people other than me :)

Same. They are excellent.

Re: FreeBSD 13.0 Beta1 Now Available

#22

Post by drewg123 »

jiggawatts wrote: post #14
drewg123 wrote: post #2

This release includes most of the kTLS and NUMA work that I talked about at EuroBSDCon in 2019, including hw kTLS offload support for some NICs. This allows Netflix to serve over 350Gb/s of TLS encrypted video streams from a single 32-core AMD based server (at about 50% CPU).

One thing I haven't quite understood is why Netflix even bothers to encrypt the video streams. It seems like a waste of effort, since Netflix isn't exactly serving content that would qualify as "secret". There's not even any porn on there, so it's not the biggest concern if someone were to find out what some people were watching. This data is being collected anyway via endpoint technologies like Samsung's Automated C…

"This helps protect member privacy, particularly when the network is insecure — ensuring that our members are safe from eavesdropping by anyone who might want to record their viewing habits." from https://netflixtechblog.com/protecting-netflix-viewing-priva...

Re: FreeBSD 13.0 Beta1 Now Available

#23

Post by toast0 »

jiggawatts wrote: post #14
drewg123 wrote: post #2

This release includes most of the kTLS and NUMA work that I talked about at EuroBSDCon in 2019, including hw kTLS offload support for some NICs. This allows Netflix to serve over 350Gb/s of TLS encrypted video streams from a single 32-core AMD based server (at about 50% CPU).

One thing I haven't quite understood is why Netflix even bothers to encrypt the video streams. It seems like a waste of effort, since Netflix isn't exactly serving content that would qualify as "secret". There's not even any porn on there, so it's not the biggest concern if someone were to find out what some people were watching. This data is being collected anyway via endpoint technologies like Samsung's Automated C…

Who's watching what is secret data and although it can be possible to extract that from packet sizes and duration of streaming, it's a lot easier to extract it from http paths.

But, beyond that, the battle to use http when it makes sense has been lost. Modern platforms strongly encourage https and discourage http.

Re: FreeBSD 13.0 Beta1 Now Available

#25

Post by ikawe »

jiggawatts wrote: post #14
drewg123 wrote: post #2

This release includes most of the kTLS and NUMA work that I talked about at EuroBSDCon in 2019, including hw kTLS offload support for some NICs. This allows Netflix to serve over 350Gb/s of TLS encrypted video streams from a single 32-core AMD based server (at about 50% CPU).

One thing I haven't quite understood is why Netflix even bothers to encrypt the video streams. It seems like a waste of effort, since Netflix isn't exactly serving content that would qualify as "secret". There's not even any porn on there, so it's not the biggest concern if someone were to find out what some people were watching. This data is being collected anyway via endpoint technologies like Samsung's Automated C…

Sure, things like ACR exist, it doesn't mean we should give up. Lots of people think "privacy mode" should be default for everything and isn't just for when you're watching porn.

Re: FreeBSD 13.0 Beta1 Now Available

#26

Post by drewg123 »

aduitsis wrote: post #4
drewg123 wrote: post #2

This release includes most of the kTLS and NUMA work that I talked about at EuroBSDCon in 2019, including hw kTLS offload support for some NICs. This allows Netflix to serve over 350Gb/s of TLS encrypted video streams from a single 32-core AMD based server (at about 50% CPU).

Drew, thank you kindly (and Netflix) for your contributions to FreeBSD. They do not go unnoticed. I, for one, learned quite a few things too out of your presentation, which is here: https://2019.eurobsdcon.org/slides/NUMA%20Optimizations%20in...

And one more thing.. A lot of the core NUMA work, especially in the VM system, was done by Jeff Roberson, not me. I did a lot of hacks and Jeff turned them into production quality code. Without that work, my network siloing would have been useless. More people will benefit from the core work, since its not just geared to a web workload.

And we have John Baldwin to thank for upstreaming the Netflix kTLS.

Re: FreeBSD 13.0 Beta1 Now Available

#30

Post by gautamcgoel »

I wish FreeBSD booted faster. I recall it took nearly a minute from turning my machine on (with an SSD and a recent Intel i5 processor) before I was prompted for my login credentials. It's little things like that which make the system feel a bit dated, at least to someone like me who is an outsider to FreeBSD but has used Linux for a decade. I also wished FreeBSD needed less configuration to use as a desktop (see https://www.c0ffee.net/blog/freebsd-on-a-laptop/ for what I mean). Also, does Zoom work on FreeBSD?
Post reply on HN