[ previous ] [ next ] [ threads ]
 
 From:  Chris Buechler <cbuechler at gmail dot com>
 Cc:  m0n0wall dash dev at lists dot m0n0 dot ch
 Subject:  Re: [m0n0wall-dev] Q&A on openBSD (The Future)
 Date:  Thu, 13 Oct 2005 22:22:07 -0400
new wiki page with everything related to 1.3:
http://wiki.m0n0.ch/wikka.php?wakka=OnePointThree

someone suggested a quotes page, it's there but empty.


On 10/13/05, Daniele Guazzoni <daniele dot guazzoni at gcomm dot ch> wrote:
> Instead of searching through the web I tought I ask directly the source.
> Here few statements from Theo de Raadt:
>

Very nice.  :)

I'm strongly considering emailing the NetBSD-advocacy list (thinking
that's probably the best place to ask) to get some info from them,
since it seems most of us don't have a whole lot of experience with
it.  We need not seek FreeBSD opinions, given the experiences of those
here.


> Q: what is the actual device support status of openBSD compared to other
> BSD distros ?
>
> A:We support every single device driver they support and more.

But how well?  Jim Thompson, noted wireless expert, detailed his
experiences with the horrible wireless support in the most recent
OpenBSD in a post earlier in this thread.  Of course Theo isn't going
to point out the weaknesses, but it leaves me to wonder what else he's
neglecting to mention.


> Especially when it comes to gigabit devices -- we are leading in this
> field, no longer following.
>

I don't doubt this statement, but I am going to do a comprehensive
review of NIC support.


>
> Q: can we expect that the upcoming release 3.8 will have those problems
> solved ?
>
> A: Of course.  That is just the way we develop stuff -- careful
> evolution instead of radical revolutions that often break things for
> other projects.
>

If you didn't catch it, this is no doubt a direct knock on FreeBSD's
problems from 4.x -> 5.x.  And it's true!  And he's right, it bit us
in the ass.  But FreeBSD has also changed their development model to
one of timed releases, similar to what OpenBSD does, so there will
never be another situation with extremely radical changes like 4.x to
5.x was.


> Q: do you have any references on openBSD being used in productive
> firewalls ?
>

This was never a question in my mind, and shouldn't have been in
anyone else's either.  No question whatsoever it's an excellent,
suitable firewalling platform in many environments.  I know of many
large-scale OpenBSD/pf firewall deployments that are rock solid, in
environments where downtime is absolutely not an option.  But they
also throw plenty of hardware at it, so that's a much different
situation than a project with a majority of the user base having very
limited hardware resources and few options for expandability.

remainder snipped because I have no comments other than what I've
already offered, which will be cleaned up and integrated into the wiki
along with comments/opinions from others.

-Chris