OpenBSD Journal

OpenBSD 4.0: Pufferix's Adventures

Contributed by ben on from the humppa! dept.

O’Reilly Network has a very nice interview with several developers that discusses many of the features, including improved networking support, pf changes, SCSI support, and improvements to the package system in the upcoming OpenBSD 4.0 release.

(Comments are closed)


Comments
  1. By Anonymous Coward (69.70.207.240) on

    NICE! I'm stumped for words...

  2. By Dustin Lundquist (131.191.91.111) on

    uRPF, looks very promising, now PF can be as dynamic as your routing table. Any idea on the performance hit of using it?

    Comments
    1. By djm@ (206.59.235.113) on

      > uRPF, looks very promising, now PF can be as dynamic as your
      > routing table. Any idea on the performance hit of using it?

      There will be a performance hit, but I haven't measured it. Unless you are hitting the rule on every packet (i.e no "keep state"), then the cost is *per-state* not per-packet. BTW, the cost is almost same as the existing "no-route" predicate (only a comparison more).

      If you have a very busy network or a good testbed, then I'd love to see some measurements.

      -d


      Comments
      1. By Lars Hansson (203.65.245.80) lars@unet.net.ph on

        > > uRPF, looks very promising, now PF can be as dynamic as your
        > > routing table. Any idea on the performance hit of using it?
        >
        > There will be a performance hit,

        The interesting question is of course if it's a significantly larger performance hit than doing ingress filtering manually with tables or lists. I doubt it is.

  3. By Anonymous Coward (87.78.71.194) on

    > With OpenBSD 4.0 we will improve our support for stable packages. First, there's a policy change. Until now I only backported security fixes to stable; after some discussions I was convinced that it is desirable to backport more changes, so that our users see even less reasons for mixing stable and current packages.

    Very nice!

  4. By Anonymous Coward (87.194.34.157) on

    I can't wait to Getafix ;)

Latest Articles

Credits

Copyright © - Daniel Hartmeier. All rights reserved. Articles and comments are copyright their respective authors, submission implies license to publish on this web site. Contents of the archive prior to as well as images and HTML templates were copied from the fabulous original deadly.org with Jose's and Jim's kind permission. This journal runs as CGI with httpd(8) on OpenBSD, the source code is BSD licensed. undeadly \Un*dead"ly\, a. Not subject to death; immortal. [Obs.]