PF Gets Synchronization Patch

Dan writes "Julien Bordet announces that Packet Filter (PF) now has "pfsyncd" - the ability to synchronize states across multiple firewalls. Kernel patches and alpha source code to the userland daemon can be found here. This is an alpha release meant for testing and should not be used in production. Testing, patches, and feedback is greatly appreciated."

Comments

Re:With each passing release

[TheRaven64]

Actually, they're probably right. How many people do you think are going to be running *BSD in 1000 years? *BSD is dying. So is Linux, and so is Windows, all at about the same rate (maybe give or take a decade). That's what happens in any technological field, things are developed until they are superceded, and all the time they are in use they are waiting for something better to come along to eclipse them (i.e. 'dying'). Any given technology has three main phases:

1. Not invented yet
2. Dying
3. Dead

You make it sound like being dying is a bad thing. Looked at your body recently? I don't like to break this to you, but it's dying as well.

Checkpoint replacement

[Anonymous Struct]

We have a handful of checkpoint firewalls deployed using stateful failover. It's one of those features you tend to only get after you pay a lot of money to somebody. This means one less reason to be paying thousands a year for checkpoint software subscriptions and nokia support. Maybe it's about time to look at replacing those fellas.