Live data from Hacker News

Unscrewed: A Story About OpenBSD

skeptech.org

51–60 of 67 posts

Re: Unscrewed: A Story About OpenBSD

#51
post #45

What's the difference between OpenBSD and FreeBSD. I've heard great networking things about both, but never really seen them compared side by side.

According to Wikipedia [1], OpenBSD optimizes for maximum security, whereas FreeBSD optimizes for performance, and NetBSD optimizes on portability.

1: https://en.wikipedia.org/wiki/Comparison_of_BSD_operating_sy...

Re: Unscrewed: A Story About OpenBSD

#52
post #45

What's the difference between OpenBSD and FreeBSD. I've heard great networking things about both, but never really seen them compared side by side.

OpenBSD has a conspicuous philosophy which involves a strong preference for C over C++, a ruthless minimalist pruning of the packages and ports tree, and an allergy to prevailing fads (see the reasoning behind OpenBSD's use of comic sans serif and CVS for examples of this).

Re: Unscrewed: A Story About OpenBSD

#53
post #24
post #10

Earlier quoted context omitted.

No such thing as session synchronization for different vendors. You also need to configure everything for both of these vendors, which may or may not have equal feature sets.

It's hard to have independence without independence. You want separate, you're going to have to deal with separate.

It's not about avoiding bugs or vendor vulns when you talk about HA in a network config. It's about hardware failures or individual crashes.

Re: Unscrewed: A Story About OpenBSD

#54
post #29
post #19

Earlier quoted context omitted.

Medium sized stable businesses. Small shops can't afford them. Large shops (Google, Facebook) hire people and use open source software.

At the moment, network switching and routing with open source products + commodity servers can't scale like Cisco and Juniper...if you want to have a fairly standard network (OSPF, BGP, etc). Google, for example, is able to use commodity hardware because what they are routing works with a non-traditional setup...specifically a Clos network. That works for them only because their app is designed in a way that it can s…

For core routing on fast networks, I tend to agree. Outside of that, commodity hardware and open source work just fine.

Re: Unscrewed: A Story About OpenBSD

#55
post #5

Can that hardware keep up with crypto bitrate and firewall rules, on multiple 10gb links?

Did you actually RTFA? > The only reason I use “real” network gear anymore is ... for core routing 10gbps links.

Article is old; situation in 2016 might be different.

Re: Unscrewed: A Story About OpenBSD

#56
post #34

A couple of elephants in the room: Why on earth were you running a hosting business with Cisco 2950s? Those are wiring closet desktop switches with tiny buffers. That alone probably caused a lot of pain. You didn't know about it, but they did. Second, the Juniper J4350 is a software router based on BSD. There's no special hardware in there like ASICs. It's just a PC. JunOS (historically) is based on BSD. They're movi…

I've heard nothing about JunOS moving to Linux. That would be a truly bizarre move on their part, both in terms of technical quality of Linux vs FreeBSD, and licensing headaches with the GPL. Do you have a source?

I found an article[0] from the end of 2014 that mentions they are using linux for some Open Compute project based switches (OCX models), as well as Yocto Linux as KVM hypervisor for JunOS on some models.

[0] http://www.enterprisenetworkingplanet.com/nethub/juniper-emb...

Re: Unscrewed: A Story About OpenBSD

#57
From the article "So there I was, right out on the razors-edge, implementing production networks with an untested OS on brand new hardware. And oh how it failed."

Doing Enterprise IT Arch work, I turned down more than one hot new system and put others through significant lab work, to avoid this fun. It's hard, it's expensive and it's why I wish more hardware was open.

Re: Unscrewed: A Story About OpenBSD

#58
post #51
post #45

What's the difference between OpenBSD and FreeBSD. I've heard great networking things about both, but never really seen them compared side by side.

According to Wikipedia [1], OpenBSD optimizes for maximum security, whereas FreeBSD optimizes for performance, and NetBSD optimizes on portability. 1: https://en.wikipedia.org/wiki/Comparison_of_BSD_operating_sy...

In addition to this, OpenBSD develops PacketFilter, aka PF, and so OpenBSD is the place to go for the latest and greatest from that project (and many other OpenBSD projects).

Re: Unscrewed: A Story About OpenBSD

#59
About... two decades ago I set up an OpenBSD box for my boss to use as a basic web host to pass stuff to clients.

The only time it failed -- the ONLY time -- was due to a full hard disk. Why was the hard disk full? Silly me, I forgot to implement some sort of logging discipline and a couple years' worth of logs of attempted exploits (mainly Windows NT exploits) glancing harmlessly off OpenBSD's hull had filled the disk.

Re: Unscrewed: A Story About OpenBSD

#60
post #54
post #29

Earlier quoted context omitted.

At the moment, network switching and routing with open source products + commodity servers can't scale like Cisco and Juniper...if you want to have a fairly standard network (OSPF, BGP, etc). Google, for example, is able to use commodity hardware because what they are routing works with a non-traditional setup...specifically a Clos network. That works for them only because their app is designed in a way that it can s…

For core routing on fast networks, I tend to agree. Outside of that, commodity hardware and open source work just fine.

I would add certain use cases of firewalls to that as well.
Post reply on HN