TRIM when? ZFS when? Multicore firewall when? NFSv4 when?
Let's go into those: TRIM is vital to properly supporting SSDs. Without it, deleting a few pages from the storage would require the deletion of the entire block before putting it all back, creating unnecessary reads and writes and ultimately causing a faster degradation of the SSD. ZFS, and other filesystems like it, provide numerous features both for better management of your data with subvolumes, as well as better security. The security features include snapshotting, checksumming of all data and metadata, bitrot protection, excellent implementation of software RAID, and so on. Backups should of course always be made, but they can be complimented with a better FS. I can just imagine it now: An OpenBSD admin routinely backing up his system, unaware that data is being silently corrupted. By the time it's a problem, it's too late. Imagine how far back he'd have to roll back to get to a stable state? If only he had a filesystem that wasn't written in the 80s, and actually did something to protect his data. OpenBSD has best security? I think not. PF, at least on OpenBSD, does not support more than one core of one processor. Linux's netfilter on the other hand, does. Not much else to say. It's been 18 years since NFSv4 was originally standardized, and OpenBSD has still not gotten around to implementing it. This is quite a deficiency, as NFSv4 now allows you to authenticate connections with Kerberos, and even encrypt the data transfers. Once again, you would think such a security-focused OS would care about such benefits, but alas, no.
Modern SSDs have garbage collection, so TRIM isn't exactly necessary. (As an anecdote, I haven't run into any issues using a Samsung EVO 850 on my ThinkPad.) ZFS is too monolithic for them - but it seems like a port of HAMMER2 is possible. But really, I think Gentoo is the only sane choice for a desktop; I use OpenBSD on my routers/laptops.
Dylan Sanders
Lol maybe 10 years ago
Tyler Reed
...
Noah Taylor
This is the most valid complaint. A system such as openbsd should really have given how often it is used as a firewall.
Cameron Scott
BTRFS vs ZFS, GO
Zachary Wright
BTRFS seems like a decent choice if you don't need parity RAID. If you do though, it's trash. They have been working on fixing it (finally), but it's still very unstable.
Aiden Sanders
Well how else would you mount directory shares on a server to a client? SSHFS? It lacks locking capabilities.
It's crudely multi-threaded. But really; if you have a machine with 4+ cores, install Gentoo.
Luis Phillips
What is that ?
Cooper Stewart
A firewall that filters packets with more than one thread
Gabriel Hughes
Wouldn't that benefit from a high number of cores then? Like a threadripper? Each process gets its own core!
Levi Wright
I thought the kernel managed that.
Adrian Myers
And does the kernel handling something automagically make it multi core? No.
Ayden Phillips
I just thought that since the kernel is the software who redistributes the hardware resources I thought it would handle multi core management for other softwares.
Jaxon Edwards
The kernel can not just reengineer something to support multiple threads.
Jacob Sanders
Somebody's threatened by OpenBSD more and more. I've noticed these issues being brought up on HN, Reddit, cuck chan, etc. It's almost as if there's some kind of checklist of shill points that are being used to diss OpenBSD.
Could our glow in the dark friends be feeling anxious about the one OS they don't appear to control directly? Time to install OpenBSD.
Adam Jenkins
Interesting, for my defense the only reason that I don't use it is because of the license otherwise there's to learn from it.
William Nelson
Will you not use public domain code either because that is even more permissive.
Don't bring that kind interpretation fallacy and endless smug discussions in this the redoxOS thread was enough to prove that permissive license are constantly abused by power tripping fags. If you have too much power you abuse it and it's normal because it's a human reaction.
Andrew Thompson
only by one
Blake Lewis
So you personally won't use a project that grants YOU more freedom because someone else has that same freedom.
Grayson Clark
what the fuck do you use big boy?
Samuel Brown
ZFS > BTRFS if you need raid5/6. BTRFS > ZFS if you need to change replication levels on the fly.
Tyler Moore
...
Elijah Evans
Or if you need to expand/shrink the pools.
Nathan Butler
sshfs
David Mitchell
Every "flaw" mentioned is inconsequential for the target user of OpenBSD, as pointed out already in this thread. My point is the excellent default security and small non-SJW non-CIA nigger OpenBSD team makes people feel threatened and we're seeing a wave of shilling which reflects this. Shills leak metadata, if you see this type of thread and post show up everywhere there's OpenBSD talk on the Internet there's a reason for it.
casssunstein.jpg
Jackson Roberts
Yes user no one ever uses openbsd as a firewall, there is no need for multicore filtering.
Camden Peterson
btrfs is a meme. It will never be good and most of its features are just layering violations that we've had in LVM and mdraid for almost 20 years.
Joseph White
Is there really a need for it though?
Carter Foster
How can anybody seriously suggest this for important data.
Jace Johnson
Any recommendations for data hoarders and >>>/hydrus/ ?
Lincoln Jenkins
I'd still use OpenBSD even if it didn't do SMP at all.
Dylan Evans
Never
Carter Scott
check those quads
It would bloody well help 'pf' since quad cores are cheap, and will become even cheaper now that our favorite Israeli processor manufacturer has responded to AMD's 'moar coars' approach.
Robert Cox
The pasta smells great. Now fuck off back to 4chan and continue your shilling there.
David Ortiz
The software has to tell the kernel that it needs separate resources. The kernel would have no way of accurately or intelligently assuming a particular process needs something different without being explicity told.
Anthony Fisher
GNU/Linux. I hear NetBSD has ZFS now, so if you want BSD, that's one to look at.
Jason Brooks
literally useless at best and botnet at worst
Jace Cox
do you even know what you're talking about?
Jonathan Martin
Lol you guys do realize these are for servers right? Think 24 cores not 4. And you have 23 of them just sitting idle.
Joseph Jenkins
The worst part is that they declared it pretty much ready at Kernel 3.19, and some of us believed them. BTRFS is a dead end, already being dropped by some distros. BcacheFS is the the new hope.
Kayden Phillips
Or you can use ZFS that works right now and has massive real world installations.
Xavier Diaz
Do YOU even know where you are?
Bentley Turner
if it exists, you know the drill
Joseph Bennett
bcachefs
Henry Turner
I meant which filesystem?
Jordan Fisher
Generally, ZFS. It's been around for a while, has nothing really broken about it, and is the most reliable choice. It's not very flexible though, and is a resource hog, so take that into consideration. If your usecase would benefit from RAID10 instead of parity RAID, maybe look into btrfs. It's way more flexible with resizing stuff and I think is supposed to be more efficient, while offering the same sort of stability benefits as ZFS. Bonus advantage is that it'll be already available built into the kernel on any distro except RHEL. Just don't dare use RAID5/6 with it I hear there's some HAMMER2 thing on DragonflyBSD. I don't have any knowledge of that one beyond "it exists" though.
Juan Cooper
So which linux distro + ZFS + Hydrus?
Lincoln Walker
For easiest installation and setup, I recommend Ubuntu or Ubuntu Server. They make it like 1 command.
Was going to ask, maybe write a tutorial on /hydrus/ about the setup?
Adam Sanchez
To be honest i've just now heard of Hydrus. Still not entirely sure what it is. I mainly have been looking into and learning about the advantages and disadvantages of these filesystems for a future project, that being a custom NAS box that is 100% libre hardware. I'm waiting for a proper RISC-V board to be released, most likely from LowRISC.
Alexander Kelly
Well Ubuntu + ZFS + Hydrus sounds good, but we should have a setup to backup the SQlite DB to make sure things don't fail.
Ayden Mitchell
Why does your firewall consume a whole core of your server all of a sudden? How much bandwidth can pf running on a whole core service? Probably depends on a lot of things. Seems like an extreme edge case only relevant for an extremely small subset of users anyway.
Where has this been a problem, can you point to anybody ever running into a practical barrier because pf only runs on one core?
Is it even true?
David Jackson
Because user some people are routing more data than your 20 megabit home connection.
Logan Lee
FreeNAS.
Owen Perry
*hugs*
Cooper Rodriguez
It may be CuckBSD but eventually you'll come back to it on your knees.
So what's the practical limit? How fast of a single core OpenBSD machine do you need to service pf only?
Seems like this is a Pajeet-tier Jewish bullet point complaint, let's hear about practical limits.
Jayden Morgan
extreme edge cases, such as estonian IoT botnet DDOS attacks, can cause losses ranging in the millions of shekels. furthermore, multithreading will help 'pf' scale onto higher thread count hardware, such as server class RISC designs like IBM's POWER9 and Cavium's special sauce ThunderX. Reliance on single core performance is a reliance on insecure Intel hardware.
Jaxon Wright
What's the sticking point from the Intel perspective which is keeping pf back? Is it so?
For my money this seems to be a barrier which people will probably rarely run into, years ago I worked on internet backbone hardware running a BSD variant all off of 400MHz Power4 class chips, we could pump a fuckload of data, tens of gigabits per second.
Ryan Davis
pf isn't actually good, the only reason it rose to prominence is because pfSense has a good UI. It is in every way weaker than what is provided in Linux. They both suffer from being designed for the world of yesterday and are absolute hell to automate for modern, non-trivial setups. nftables will improve that a bit and hopefully with more work on netdev replace tc which is currently impossible to use for anything significant without hundreds of lines of code managing the rules externally.
Adrian Carter
Retard the point was that A DEDICATED FIREWALL would have most of its resources idle as it struggles to keep up with its one core.
Benjamin Parker
I make network devices for a living and we use mid-range desktop tier Intel chips for 10Gbit that also do transparent compression. Every packet is pulled into userspace, 'improved', then sent back to the kernel. If I was just running a firewall I'd need like 1/1000th of the power to handle 10Gbit as the packets usually don't even fully enter the kernel let alone get round-tripped to userspace. Is someone really having trouble with single core firewalling or is it a LARP concern?
Levi Ramirez
that's cute user. come back when you have a real network.
Nothing surprising here. It's almost impossible to find software projects without weird mentally ill people these days. Programming causes mental retardation it seems...
Jayden Evans
This has actually been a freebsd guy for the past 10 years or so.
Matthew Davis
This guy does more in a single day than you have ever done in your lifetime.
Ayden Cox
Nice projection, not everyone here is necessarily an unemployed attention whore.
Kayden Adams
Ahh, the quintessential tripfag's words of wisdom. Did you just got unbanned?
Ian Flores
It's a larp concern, note none of the shills have presented an actual use case where they're running into a barrier because of pf.
Owen Evans
Why haven't we disabled the name field yet? It seems to work fine for /v/ and Zig Forums
Lincoln Morales
This would help a lot but the mods on this board are Intel shills.
Carson Hill
B-But OpenBSD has good docs/man-pages and good coding style. I would like to see HAMMER2 instead of ZFS in OpenBSD and Ghanoo/Loonix
>/oven/
Aaron Jenkins
None of your posts are conductive to discussion.
Aaron Campbell
good to see cuteposting is alive and well on this board! this, although GuixSD is looking pretty good.
Luis James
You just got blown out tripfaggot.
OpenBSD is based and the shilling reeks of desperation.
