Slashdot Mirror


What's New in the FreeBSD Network Stack

jjgm writes "As FreeBSD 5-STABLE approaches, Andre Oppermann has produced a high-level presentation on the changes to the FreeBSD 5.3 network stack. There are many clever tricks for performance and scalability. Amongst other things, Andre claims that FreeBSD can now route 1Mpps on a 2.8GHz Xeon whilst Linux can't do much more than 100kpps."

169 comments

  1. It's amazing... by Anonymous Coward · · Score: 0, Insightful

    what the "dead" can do nowdays!

    1. Re:It's amazing... by torstenvl · · Score: 1

      Uh. This is not a Troll. This is anti-troll, via being facetious.

      assert(mod == stupid);

    2. Re:It's amazing... by torstenvl · · Score: 0, Offtopic

      You're an idiot. This "FUD" is obviously facetious. hence the quotes around "dead" -- showing that it was someone else's word and not his/hers. Hint: Look at my usage of the word "FUD". No wonder you posted AC.

    3. Re:It's amazing... by Anonymous Coward · · Score: 0

      First of all: idiot my ass. But...
      Ok, I have to apologize for being harsh before. I really didn't notice it could be read that way - but I bet I'm not the only one. Anyway, sorry.

    4. Re:It's amazing... by SillyNickName4me · · Score: 1

      I can read that many ways.. yeah, also as a troll, but 'funny' was really the first thing that came to mind, not troll.. and it is factual.

      I'd really appreciate it if my fellow BSD users would get a bit more of a sense of humor etc...

    5. Re:It's amazing... by Shanep · · Score: 1

      I'd really appreciate it if my fellow BSD users would get a bit more of a sense of humor etc...

      Me too. I am responsible for the first post. I meant it as a jab to the trolls who keep posting the BSD is dead crap. They just keep on posting, while FreeBSD, OpenBSD, NetBSD and Mac OSX just keep taking huge strides forward.

      I posted as AC because I did not want to submit my login details from where I was at the time.

      --
      War crimes, torture, lies, illegal spying... Would someone give Bush a blowjob, already, so he can be impeached?
  2. a.k.a. Project Evil by Goyuix · · Score: 4, Interesting

    NDIS Binary Compatibility

    FreeBSD i386 can use binary Ethernet and WLAN network drivers written to the
    Windows XP NDIS 5.1 specification. It is a little cumbersome to convert a NDIS driver
    into a FreeBSD Kernel Loadable Module (KLD): (By: wpaul)

    # ndiscvt -O -i neti557x.inf -s neti557x.sys -n intel0
    # /* Compile and install new kernel with "options NDIS" */
    # kldload intel0

    Man ndis(4), ndisapi(9), ndiscvt(

  3. ?pps by BladeMelbourne · · Score: 2

    All this talk of Mpps and Kpps is making my need to pee more urgent.

    Can someone explain what the 'pps' means? the M and K dont need defining...

    1. Re:?pps by dave_f1m · · Score: 2, Informative

      packets per second

    2. Re:?pps by bohnsack · · Score: 2, Informative

      Pakets per second.

    3. Re:?pps by Shanep · · Score: 4, Informative

      Packets Per Second.

      It is usually high packets per second that brings a machine to its knees, as opposed to bits or bytes per second.

      If you had a given amount of sustained data coming into a machine, it would typically be much less taxing if those packets where large, as opposed to the same bandwidth being used up with very small packets.

      Packets are variable length and a single packet will be much larger than a single byte.

      --
      War crimes, torture, lies, illegal spying... Would someone give Bush a blowjob, already, so he can be impeached?
    4. Re:?pps by FooAtWFU · · Score: 3, Informative
      It is usually high packets per second that brings a machine to its knees, as opposed to bits or bytes per second.

      Which is what you see in DoSc attacks: stuff like SYN floods and smurf attacks.

      --
      The World Wide Web is dying. Soon, we shall have only the Internet.
    5. Re:?pps by Shanep · · Score: 4, Informative

      Which is what you see in DoSc attacks:

      Yes. A DoS should be most effective with the smallest packets you can send.

      stuff like SYN floods

      SYN floods work by requestion permision to statefully connect, without then going through with replying to the handshake that is sent back. When done over and over, this eventually fills the table of half-connections, which in turn prevents the initiation of any more connections and thus a denial of service.

      The fact that these packets are small, is coincidental to this discusion. In other words, SYN floods don't work because the packets are small, they work because completing the required handshake sequence is not done.

      and smurf attacks.

      Ahh, DDoS of lots of little packets, via simple spoofing. What fun.

      --
      War crimes, torture, lies, illegal spying... Would someone give Bush a blowjob, already, so he can be impeached?
    6. Re:?pps by Homology · · Score: 4, Interesting
      It is usually high packets per second that brings a machine to its knees, as opposed to bits or bytes per second.

      Indeed, in this is very you will see a very marked difference between low and high quality network cards. For instance, the common Realtek NIC offloads alot onto the CPU, and induce many interrupts. While high quality cards, like Intel gigabit, will do much prosessing on the card itself. A "ping -f" while using top can be instructive.

    7. Re:?pps by Anonymous Coward · · Score: 1, Informative
      the M and K dont need defining...

      For those that don't know, M is an abreviation for the prefix "Mega" which means 10^6 (1 million). K stands for Kelvins, a unit of measurement for temperature where 0K is absolute 0.

    8. Re:?pps by Anonymous Coward · · Score: 0

      I don't think you've let everybody know that you understand those terms yet. How about posting a reply and boasting about your knowledge of DoS methods again? I didn't quite catch it the first time, thanks!

    9. Re:?pps by Anonymous Coward · · Score: 0

      Ahh, DDoS of lots of little packets, via simple spoofing.

      Yes. Simple is the opposite of complex and is much preferred when doing a DDoS attack.

      Ahh, spoofing is the act of pretending that the packet is something it's not, such as from a different source IP address. In other words, it's the spoofing which causes tracing back the real source to be difficult.

      What fun.

    10. Re:?pps by Dispossessed · · Score: 1

      What the AC is trying to say is that 'kilo' is supposed to be written as 'k' not 'K'.

    11. Re:?pps by realdpk · · Score: 1

      I'm surprised we don't see more DoS attacks like the following:

      Connect to a web server from your botnet, and send the query line by line, with ~60 seconds between each line (IE 60 seconds, then send GET, 60 seconds, send User-Agent, so on). You could run an Apache server out of processes in no time, and there'd be no easy way to block what is going on, without also blocking legit traffic.

    12. Re:?pps by Anonymous Coward · · Score: 0

      We do see this often. Almost daily, in fact.

      -NOC staff for a couple humongous websites.

  4. pps? by XO · · Score: 0

    I'm presuming that Mpps = Million Packets-per-Second
    and Kpps = Thousand Packets-per-second.

    Not exactly a standard notation that I've ever heard of, but I'll go with it.

    Great, now, let's see if you can actually GET a Million Packets in a Second just to the hardware, let alone to the software. Hmm.

    Now, correct me if I'm wrong, but to be able to RECEIVE that much data, in the smallest POSSIBLE TCP/IP packets, you would need 500Mbit network link. Sure, I realise that faster than 100Mbit exists, but it sure isn't common.

    And I would highly doubt it's ability to re-route 500Mbits of data per SECOND.

    Words speak louder than TRUTH. George Bush.

    --
    "Champagne for my real friends - and real pain for my sham friends!" http://ericblade.postalboard.com/
    1. Re:pps? by ryanmoffett · · Score: 5, Informative

      Actually, pps (packets per second) is a quite common if not misleading statistic spewed by networking equipment vendors, and has been for years. Packets-per-second doesn't really tell you the characteristics of the packets being sent. One interpretation might be the following:
      The minimum ICMP packet size with Ethernet II encapsulation is 46 bytes. The minimum TCP packet size with Ethernet II encapsulation is 54 bytes. So, 1000000pps of 46 byte ICMP is 368 megabits/sec. And, 1000000pps of 54 byte TCP is 432 megabits/sec. Both of these figures seem realistic to me.

      Now, the maximum length of an Ethernet II packet, regardless of any upper layer protocols is 1514 bytes. 1000000pps of 1514 bytes is 12.1 gigabits/sec. Obviously, that packet size isn't what they were referencing.

      In respect to the link speed, a 1000Mbit or a Gigabit Ethernet link is quite common these days and the above minimum packet size stats aren't out of line.

      Actually, on both OS's with a larger packet size, and thus a lower amount of packets-per-second, a decent machine with 66mhz PCI Gigabit NICs can easily route 500mb/sec through the box.

    2. Re:pps? by Shanep · · Score: 4, Informative

      Packets-per-second doesn't really tell you the characteristics of the packets being sent.

      No it doesn't, however, being capable of sustaining 1 million packets per second, even if they are the smallest packets possible, is pretty impressive.

      The packets have to each be serviced, so at around the same line bandwidth, smallest packets could be coming around 30 times more frequently than the largest packets.

      Lots of small packets tend to be more taxing than much fewer large packets.

      The fact that there is perhaps a 10 fold difference in performance ceiling between Linux and FreeBSD, should show that this is not a simple bandwidth limit. I would go so far as to say that bits per second can be more misleading than packets per second if used alone or in an inappropriate context.

      Packets per second says a lot about the stack, bits per second says more about the interface driver.

      --
      War crimes, torture, lies, illegal spying... Would someone give Bush a blowjob, already, so he can be impeached?
    3. Re:pps? by Homology · · Score: 1
      Packets per second says a lot about the stack, bits per second says more about the interface driver.

      Packets per second says alot about the NIC as well. Use one of those cheap (cheap, like in bad quality) Realtek cards, and do a "ping -f" while watching top. See the CPU usage increase alot. Now, try some better cards, and you don't see the same.

    4. Re:pps? by renehollan · · Score: 1
      Great, now, let's see if you can actually GET a Million Packets in a Second just to the hardware, let alone to the software. Hmm.

      When I worked at Chiaro, we routinely handled saturated optical GbE links as part of testing. Of course, these didn't handle bulk data traffic, just the routing protocol updates :-> for the control processor(s) for the real router, which was all optical. I forget how many hundred OC-192 (10 Gb/s) ports it could handle.

      My job there involved, among writing and backporting GbE drivers for Intel NICs under FreeBSD, stress testing their STAR mechanism: this was designed to ensure if one router control processor went down, there would be no loss of functionality -- the secondary router control processor was on hot standby and knew all about the routing table state of the first one.

      --
      You could've hired me.
    5. Re:pps? by Anonymous Coward · · Score: 0
      and Kpps = Thousand Packets-per-second.

      Nope, actually that's Kelvin * Packet/second. (I think he meant kpps.)

    6. Re:pps? by psyconaut · · Score: 2, Insightful

      When even my laptop has 1Gbit networking built-in, I'm not sure how you can say "faster than 100Mbit exists, but it sure isn't common".

      And Mpps is a standard notation for packet forwarding....FYI.

      -psy

    7. Re:pps? by Fweeky · · Score: 4, Informative
      From FreeBSD /usr/src/sys/pci/if_rl.c:
      * The RealTek 8139 PCI NIC redefines the meaning of 'low end.' This is
      * probably the worst PCI ethernet controller ever made, with the possible
      * exception of the FEAST chip made by SMC. The 8139 supports bus-master
      * DMA, but it has a terrible interface that nullifies any performance
      * gains that bus-master DMA usually offers.
      Hopefully RealTek have improved matters with their more recent offerings, especially with the new consumer level GigE chips, one of which I'm using right now...
    8. Re:pps? by XO · · Score: 1

      Hmm. My server has 3 RT8139's in it.

      Perhaps the Linux driver handles it better.. (this is a 486sx/33 that is hammered by doing routing for anywhere from 3 to 10 other computers, email services for a whole metric arseload of accounts that receive a ton of spam a day..) still pulls out around 80-95Mbps on transfers within the network, and gets me up to the max 3Mbps incoming speed for Internet usage.

      I'm happy with my RT8139's :)

      --
      "Champagne for my real friends - and real pain for my sham friends!" http://ericblade.postalboard.com/
    9. Re:pps? by XO · · Score: 1

      Wow, those packets are damn cold. Yes, they are.

      --
      "Champagne for my real friends - and real pain for my sham friends!" http://ericblade.postalboard.com/
    10. Re:pps? by crackshoe · · Score: 1

      common? in the mac community, powermacs (and some powerbooks) have had gigabit ethernet as standard and the rise of feature rich mobos (quick - here's SATA raid, 2 channels of ATA raid, a dancing lemur, and gigabit ethernet) are making it steadily more common.

      --
      Don't worry - its just stigmata. Pass me a napkin and don't you dare tell my mother.
    11. Re:pps? by noselasd · · Score: 1

      you have a 33 MHz box that pulls 90Mbps of traffic ? I'm impressed ....

    12. Re:pps? by Fweeky · · Score: 1

      I dunno; the only reference I can find comparing them is this, where the FreeBSD driver is said to be using a faster technique. What's your system load when network's saturated?

      My machines all have NetGear FA311's, which seem to hasis0: Applying short cable fix (reg=5)ve a few of their own problems, but at least they don't have pages of pained commentary in their drivers on how awful the developers think the hardware is ;)

    13. Re:pps? by SirDrinksAlot · · Score: 1

      It's not a question of actually doing 1 million packets per second, it's the efficiency that gives it the POTENTIAL to do 1 million packets per second that's important. This gives everything else that much more time to do what they need so the same hardware can do MORE work.

    14. Re:pps? by Anonymous Coward · · Score: 0

      Sure, I realise that faster than 100Mbit exists, but it sure isn't common.

      Considering that it's hard to buy a computer these days without a GigE card, I'd say it's quite common. It's so common, in fact, that I plunked down the odd $30 for a GigE nic to upgrade my old 10/100 nics. I'm glad I did. Now I jus wish the linux boxes could keep up with the bursting. :)

    15. Re:pps? by Anonymous Coward · · Score: 0

      > Considering that it's hard to buy a computer these days without a GigE card, I'd say it's quite common.

      Easy:

      http://www.apple.com/imac/specs.html

    16. Re:pps? by Cochonou · · Score: 1

      You've got PCI slots in that 486SX/33 ? That is not that common.

    17. Re:pps? by Anonymous Coward · · Score: 0

      especially with the new consumer level GigE chips, one of which I'm using right now...

      Isn't that a bit overkill for posting to slashdot? Ah well... the bigger the better the more expensive the more broke the more homeless the more die and go to hell, i guess!

    18. Re:pps? by Fweeky · · Score: 1

      Filesharing at 1000Mbps > filesharing at 100Mbps.

      Not that I'd know, not having a GigE switch, or indeed any other GigE devices, but since it comes bundled on most new motherboards I can at least look forward to my HD's no longer outpacing my LAN many times over next time I upgrade my server.

  5. Heh by k4rm4_p0l7c3 · · Score: 1, Funny

    Nice throughput- so how long before MS implements it in Longhorn or XP ? :D

    1. Re:Heh by Shanep · · Score: 1

      Nice throughput- so how long before MS implements it in Longhorn or XP ? :D

      As long as OpenBSD and OSX get it, I'll be happy.

      The BSD's look pretty lively to me (he says, sitting in his OpenBSD shirt).

      --
      War crimes, torture, lies, illegal spying... Would someone give Bush a blowjob, already, so he can be impeached?
    2. Re:Heh by rtaylor · · Score: 2, Insightful

      I know you're being funny -- but I think the answer most of us would have is "Hopefully not too long".

      If those changes made it into every OS that could use the improvement, then everything networked would find things just that much better without throwing away the old hardware.

      --
      Rod Taylor
    3. Re:Heh by 0racle · · Score: 1

      Never? Microsoft has long since replaced the BSD TCP/IP stack with their own.

      --
      "I use a Mac because I'm just better than you are."
    4. Re:Heh by Billly+Gates · · Score: 1

      Hmmm I wonder if they are going to port NDIS into WIndows?

    5. Re:Heh by tepples · · Score: 1

      Still doesn't mean Microsoft can't borrow some of the cheats used in FreeBSD's drivers in a future version of Windows's stack or (less likely) go back to a BSD stack.

  6. Just wondering... by CoolVibe · · Score: 0, Flamebait

    How much did they nick from DragonFly? I recall that Jeffrey Hsu revamped the DFBSD TCP stack to great extent. If they did, I'd like to see some attribution.

    1. Re:Just wondering... by Anonymous Coward · · Score: 0, Flamebait

      Why was this modded down? It's true, that asshole Bosko Milekic is still jealous because DragonFlyBSD did in 1 year what FreeBSD hasn't done in 3.

    2. Re:Just wondering... by torstenvl · · Score: 0, Flamebait

      Umm.. I'm not anti-DFBSD and pro-FBSD, but I do think this is absolutely stupid. You want to see attribution from FreeBSD to DragonflyBSD? There are a few problems with this:

      a) You don't know if they actually took code from DragonflyBSD or if they were just (gasp) updating because they felt a need to stay competitive... that being one of the main intended effects of non-monopolistic free-market economics... See http://en.wikipedia.org/wiki/Competition#In_econom ics_and_business

      b) Even if they did take *actual code* from DragonflyBSD, the BSD license doesn't require attribution any longer. See http://www.opensource.org/licenses/bsd-license.php

      c) Even if they did take *actual code* from DragonflyBSD, Dragonfly's TCP stack came from FreeBSD to BEGIN with, so why is it so scandalous to merge code into FBSD's tree when that code is based on the original FBSD tree? See http://www.dragonflybsd.org/main/

      d) DragonflyBSD actually is *entirely* based on FBSD 4.x so it seems a little arrogant and petty to demand a shoutout from FreeBSD when DragonFlyBSD owes its very *existence* to FreeBSD. Again see http://www.dragonflybsd.org/main/

      Don't be a troll.

    3. Re:Just wondering... by CaptainCheese · · Score: 0, Offtopic

      Why was this modded down?
      Because some moderators just can't be bothered to read the guidelines.

      "Concentrate more on promoting than on demoting...Simply disagreeing with a comment is not a valid reason to mark it down."

      Personally, I very rarely mod things down. This is because I know a lot of people read slashdot with a +3 (or higher) filter just to wipe away the crap.

      And it's also really annoying to get modded down for a heartfelt genuine comment...

      --
      -- .sigs are a waste of data...turn them off...
    4. Re:Just wondering... by CoolVibe · · Score: 1
      Read Hsu's license. It's a 4 clause BSD license, which _REQUIRES_ attribution, since it has that advertisement clause added back in. It's just different from the usual BSD license. If you would have bothered to read DragonFly's source of the TCP stack, you would have known.

      Oh, you were wondering where you could read the source? Well, DragonFly's cvsweb has a nice interface for it. You can also compare codebases at lxr.watson.org.

      Also, DFBSD has diverged from FreeBSD 4 a great deal already. The userland might be mostly the same, but kernelwise it's all different. The developers put a lot of time and effort in it. The fact that you don't see the difference means that they are doing their work correctly. So to say that it is *entirely* based off of it is completely false. It also has bits from NetBSD and OpenBSD.

      For the record, I don't give a hoot if they take code from DragonFly. The guys working on DF should be credited for their work, that's all.

    5. Re:Just wondering... by Anonymous Coward · · Score: 1, Interesting

      Face it: DFBSD has not got anything to propose to FreeBSD save Dillon's marketing speeches on various mailing lists and its influence on FreeBSD was abysmal. Hsu's license is _incompatible_ with FreeBSDs goals and thus his code has not been taken verbatim.Of course, some ideas have been borrowed and improved upon. This is no different from the constant stream of improvements DFBSD folks appropriate from FreeBSD5, often with no attribution at all. Frankly, I hardly see any useful stuff in Hsu's code worth facing his assholic personality. If anything, it is DFBSD folks who should be jealous. Hsu has left FreeBSD and _nothing_ has happened. Project continued just fine, in fact, making more progress every day now that this particular obstacle has kindly removed itself.

    6. Re:Just wondering... by Anonymous Coward · · Score: 0

      Then you obviously can point us to FreeBSD kernel changes that can be traced to Hsu and where his license is applicable. Not something where he just slapped his own Copyright on top of other people work? Kindly provide references to such code in FreeBSD kernel or shut up.

    7. Re:Just wondering... by Anonymous Coward · · Score: 2, Insightful

      /*
      * Copyright (c) 2003, 2004 Jeffrey M. Hsu. All rights reserved.
      *
      * License terms: all terms for the DragonFly license above plus the following:
      *
      * 4. All advertising materials mentioning features or use of this software
      * must display the following acknowledgement:
      *
      * This product includes software developed by Jeffrey M. Hsu
      * for the DragonFly Project.
      *
      * This requirement may be waived with permission from Jeffrey Hsu.
      * This requirement will sunset and may be removed on July 8 2005,
      * after which the standard DragonFly license (as shown above) will
      * apply.
      */

      http://www.dragonflybsd.org/cgi-bin/cvsweb.cgi/s rc /sys/sys/socketops.h?rev=1.5&content-type=text/x-c vsweb-markup
      http://www.google.com/search?q=commi ts+hsu&btnG=Go ogle+Search&domains=leaf.dragonflybsd.org&sitesear ch=leaf.dragonflybsd.org
      http://leaf.dragonflybsd .org/mailarchive/kernel/20 04-07/msg00121.html

      This took a total of 2 minutes to find.

      Why not use google next time before looking like a flaming linux jackass?

    8. Re:Just wondering... by CoolVibe · · Score: 2, Insightful
      This is no different from the constant stream of improvements DFBSD folks appropriate from FreeBSD5, often with no attribution at all.

      Please point out an example where DFBSD doesn't attribute correctly. I think you won't find any. (and if you do, please mail the kernel-list, since the dfbsd crew is very strict about that)

    9. Re:Just wondering... by SillyNickName4me · · Score: 1

      Which is too bad. the similar clause in the BSD license was removed for good reasons, and without wanting to give any judgement as to the quality of Hsu's work, he obviously did not get the clue there.

  7. Re:Playground r00lz for OSS Hackers? by Anonymous Coward · · Score: 1, Insightful

    They don't need to. Linux uses *very* dumb routing algorithms at the moment. There is a fair amount of public research on much smarter mechanisms (one of which I guess FreeBSD would have used). AFAIK, this is getting implemented on Linux as we speak.

  8. Sounds great by Anonymous Coward · · Score: 1

    This is just another proof on the superiority of the freebsd tcp-stack. I can't wait for a full benchmark between 5.3 (or 5.4, too much changes on 5.3 might not work just wounderfully right now) and the linux kernel.

    1. Re:Sounds great by Anonymous Coward · · Score: 0, Flamebait

      Are you joking? The FreeBSD "tcp-stack" has only *just* got (very old) features required for high performance networking, like SACK.

      The computing world moves pretty fast in case you hadn't noticed; the FreeBSD "tcp-stack" was apparently superior (with no real evidence to back it up, other than somebody's uncle's girlfriend's brother using it to serve porn) about a decade or so ago.

      As surprising as it may seem to you, FreeBSD will have to actually prove its high performance networking capabilities to non zealots.

    2. Re:Sounds great by Anonymous Coward · · Score: 2, Insightful

      You GNU/LNUX zealots with your NIH syndrome. Nothing on earth beats OpenBSD for firewall usage, not even your piece of shit netfilter thing. When it comes to performance FreeBSD and DragonFlyBSD win hands down. But don't worry, you still get the hype.

    3. Re:Sounds great by torstenvl · · Score: 3, Interesting

      The BSD networking stack or some sort of clone thereof is in use on every modern operating system in the world. TCP/IP was originally made on BSD. Try opening ftp.exe on Windows in Notepad. Yep, there it is. Copyright Regents of the University of California. It's everywhere. Even the paradigm of sockets is everywhere. BSD defines networking.

      Also, features lead to bloat, the opposite of "high-performance" so your argument needs further detail to be of any credibility.

    4. Re:Sounds great by mnmn · · Score: 1

      I'm too itching for real benchmarks for packet receiving, routing, switching as a bridge etc between the BSDs including both FreeBSD 4 and 5.x, and Linux and the rest, including maybe cisco 2600 routers.

      For some reason, I dont think cisco or Microsoft would fund such studies.

      --
      "Give orange me give eat orange me eat orange give me eat orange give me you." -Nim Chimpsky
    5. Re:Sounds great by Anonymous Coward · · Score: 0

      So you are claiming that Linux is more secure than OpenBSD? Sounds like what we have here is a Linux zealot spouting off without any facts to back it up. And contrary to what is commonly accepted by the best people in the biz.

      Or, to translate for the intelligence impaired, a clueless Linux zealot at that.

    6. Re:Sounds great by Anonymous Coward · · Score: 0

      No, moron, you're the only one who's brought up Linux in this thread.

      I wouldn't claim OpenBSD is more secure than Linux (or vice versa, without seeing/researching facts for myself). I definitely wouldn't say "Nothing on earth beats OpenBSD for firewall usage", because that would be something a BSD zealot would say.

      So can I somehow just beat it through your thick skull that we were not talking about Linux in this thread until you brought it up? Retard.

    7. Re:Sounds great by Anonymous Coward · · Score: 0

      So you are claiming that Linux is more secure than OpenBSD?

      Err... no, they weren't. You were the only one making claims without any facts to back them up. You really have a serious Linux paranoia problem - I suggest you get help.

      I'll get the ball rolling by giving you some advice: get off the crack pipe, you whore.

    8. Re:Sounds great by erik_norgaard · · Score: 1
      This stems from their Linux envy, and their hounding desire for their operating system to be *better* than something, rather than just being satisfied with it being good in its own right.

      As if it is specific to BSD to do a comparison. AFAIK linux advocates spends a lot of resources proving that linux is better, more secure, cheaper, etc. than certain comercial products.

      And if certain vendors present studies that proves otherwise, these same advocates will imidiately claim that the studies were conducted to arrive at a certain conclusion.

      This all stems from the Windows envy because Linux will never become as popular...

      Well, I use FreeBSD - who cares about inferior systems as long as you are not using them? :-)

    9. Re:Sounds great by Anonymous Coward · · Score: 0

      As if it is specific to BSD to do a comparison. AFAIK linux advocates spends a lot of resources proving that linux is better, more secure, cheaper, etc. than certain comercial products.

      There we go again. Linux linux linux. This is a *FreeBSD* thread, and you still can't stop talking about Linux.

      And if certain vendors present studies that proves otherwise, these same advocates will imidiately claim that the studies were conducted to arrive at a certain conclusion.

      This all stems from the Windows envy because Linux will never become as popular...


      Please. Enough of this constant Linux stuff. Just keep your eyes on the road, so to speak. This is about FreeBSD for crying out loud.

      Well, I use FreeBSD - who cares about inferior systems as long as you are not using them? :-)

      If by 'inferior', you mean Linux... well... you really seem to care about it a lot.

      This is basically a summary of the thread:
      "FreeBSD's network stack is the best in the world"

      "Well, they've only just got important feature X in, so maybe not"

      "WAAAHH WAAAAH Linux is crap FreeBSD is awesome Linux is so shit"

      "Oh my dear god you are a lunatic. The topic is FreeBSD, not Linux you idiot"

      "WAAHH WAAAHHH Linux is crap OpenBSD is so much better you Linux zealot"

      "Okie dokie... [some fitting insults]"

    10. Re:Sounds great by erik_norgaard · · Score: 1

      First: The original subject actually mentions a comparison of FreeBSD vs. Linux stating:

      Andre claims that FreeBSD can now route 1Mpps on a 2.8GHz Xeon whilst Linux can't do much more than 100kpps.

      While the pure anouncement is indeed purely FreeBSD - and not OpenBSD, NetBSD, Darwin or Linux, the comparison was founded at the very top.

      Second: I was offended by the part quoted from the previous post. It is nothing special to do comparisons, we all do it all the time. But some advocates are hugely annoyed when the comparison is not in their favor.

      A previous post wrote "This stems from their Linux envy, and their hounding desire for their operating system to be *better* than something, rather than just being satisfied with it being good in its own right."

      My "This all stems from the Windows envy because Linux will never become as popular..." is a complete analogy - just with a change of names. I wrote it in anoyance that some of these advocates appears to reserve the right to lobbyism and advocacy.

      Finally, my end line: "who cares about inferior systems as long as you are not using them? :-)". First, note the smiley. Second, this can be used by anyone regardless of which system you use. You have the freedom to choose, and assuming you make the best choice for you, why do you put so much energy into whatever is irrelevant to your system? Let people choose whatever you think is inferior, the freedom to choose includes the right to make a bad choice from whichever perspective you have.

      I agree with you that the thread is largely throwing mud against whoever throws mud at you. Before you mud me down :-) - note that I abstained from participating in that part of the game - my previous post was intended to throw oil on the water.

      This line is off topic.

    11. Re:Sounds great by Anonymous Coward · · Score: 0

      No no no, GNU tools SUCK, they are the epitome of bloat.

      The GNU versions of cp, dd, df are all from the original 4.4BSD if I recall correctly.

      And bsdtar is supperior to GNU tar, autodetection and management of compression (libbzip2, libzip etc), plus it is actually fully compatible with the original tar FF.

      The only GNU tools worth using is gcc and the binutils toolchain, and just barely, and gcc wasn't until version 3.2.

      GNU suck, and, so does RMS. -- Because politics suck!

    12. Re:Sounds great by Anonymous Coward · · Score: 0

      "I definitely wouldn't say "Nothing on earth beats OpenBSD for firewall usage", because that would be something a BSD zealot would say."

      But you've shown us absolutely nothing as a better alternative to OpenBSD. The only thing you've come up with is some closed-source alternative. The only thing I can use to evaluate it is Marketing hype.

      You've been given several chances to provide some evidence for a better solution than OpenBSD. And you've failed to do so.

      I have no doubt that you wouldn't make the statement that "Nothing on Earth beats OpenBSD". But I question whether you're able to make any statement based upon technical issues. With all due respect, I have seen nothing which distinguishes you from a Marketing droid.

      No offense intended. But if you have a tecnical argument to make, please do so and stick to that. I would gladly welcome real knowledge here.

      Until such a time, I'd have to agree with the original poster that nothing does beat OpenBSD. I've looked at the alternatives, and haven't seen anything yet, including your proposed suggestion. This isn't zealotry. Just the facts based upon a lot of evaluation over the years.

      And the burden of proof is upon you. I can fully evaluate OpenBSD. I can't evaluate a closed-source solution. And, knowing many of the people who implement these things, the skill involved with closed-source solutions leaves very much to be desired.

      So please, if you do have a real argument to make, do so. All I've seen so far is marketing hype and name calling.

    13. Re:Sounds great by torstenvl · · Score: 1

      Nothing to back them up, eh?

      Fact: OpenBSD has had one, count it, one remote hole in the default install in *eight years*. See http://www.openbsd.org/

      Fact: Linux is a kernel, not a complete system, so without some more community-building and standardizing and code merging to come up with a base system universal to the distributions, there's no way Linux -- as opposed to individual vendors thereof -- can ever have a secure default install of a useable system.

      Fact: Many people in the industry regard OpenBSD as the most secure OS generally available. This only indirectly supports the point, but nevertheless lends credibility thereto. See http://www.onlamp.com/pub/a/bsd/2000/08/08/OpenBSD .html and http://rootprompt.org/article.php3?article=832

    14. Re:Sounds great by Anonymous Coward · · Score: 0

      Ah yes, heh, Linux's GPL. It protects the hard work of the contributors ... by effectively not allowing it to be used in any commercial products without prohibitive requirements. Woot! GO GPL!

      What, exactly, is it about the GNU utils that make them so much better than BSD's?

    15. Re:Sounds great by jrockway · · Score: 1

      > What, exactly, is it about the GNU utils that make them so much better than BSD's?

      getopt

      --
      My other car is first.
    16. Re:Sounds great by Anonymous Coward · · Score: 0

      Oh wow! OpenBSD proclaims OpenBSD to have one remote hole in the default install in *eight years*, for their definition of "remote hole", and their set of terms and conditions (if a newer version is released before the security problem is generally announced - even if exploits have already been used).

      Wow! That is almost as impressive as having a completely audited codebase. Audited to their unclear standards, and by the same people as who wrote the code.

      And I'd take OpenVMS in a flash over OpenBSD if I wanted something really secure.

    17. Re:Sounds great by Anonymous Coward · · Score: 0

      On the other hand, you have the wonderful BSD license, which doesn't allow commercial entities to contribute to the open source base without prohibitive requirements (ie. allowing all their competitors to close up the code). Woot! GO BSD!

      Let's see. IBM, Intel, AMD, NEC, Fujitsu, Toshiba, Sony, Dell, Sun, HP, SGI, Oracle, RedHat, SuSE all employ full time staff to work just on the Linux kernel. Apart from hundreds of other small companies, governments, educational institutes, thousands of volunteers.

      Really commercially unfriendly. But don't worry, at least Microsoft likes closing up BSD code (unfortunately their code doesn't seem to be getting much better, which is the supposed goal of the BSD license).

    18. Re:Sounds great by dmiller · · Score: 1

      Compare:

      $ ls -l /bin/bash
      -rwxr-xr-x 1 root root 593304 Mar 11 22:19 /bin/bash
      $ ldd /bin/bash
      libtermcap.so.2 => /lib/libtermcap.so.2 (0x00d86000)
      libdl.so.2 => /lib/libdl.so.2 (0x00c93000)
      libc.so.6 => /lib/tls/libc.so.6 (0x00b51000)
      /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x00b38000)
      $ file /bin/bash
      /bin/bash: ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), for GNU/Linux 2.2.5, dynamically linked (uses shared libs), stripped
      $ ls -l /bin/ksh
      -r-xr-xr-x 3 root bin 319788 Aug 29 01:09 /bin/ksh
      $ ldd /bin/ksh
      /bin/ksh:
      ldd: /bin/ksh: not a dynamic executable
      $ file /bin/ksh
      /bin/ksh: ELF 32-bit LSB executable, Intel 80386, version 1, for OpenBSD, statically linked, stripped

      bash is over 80% larger, even without taking into account the libraries that it must pull in. Yes, bash has more features, but I don't miss them using ksh. The other tools are similar in their minimalism.

    19. Re:Sounds great by dmiller · · Score: 2

      I suppose you mean getopt_long and not getopt (which IIRC originated in BSD). I suspect that if you use BSD for a while, you may find that you have less need to for the --long-options because the documentation is usually much better on BSD systems (and not suffed into those atrocious info files). If you value terseness or you have to write portable shell scripts, then you probably won't want to use the --long-options anyway.

    20. Re:Sounds great by jrockway · · Score: 1

      I like all the features, myself, and I like the license. That's why I use GNU/Linux and not OpenBSD (although I am planning of pulling out the good features of GNU/Linux and putting them in OpenBSD because OpenBSD is just very very cool).

      --
      My other car is first.
    21. Re:Sounds great by Anonymous Coward · · Score: 0
      Are you joking? The FreeBSD "tcp-stack" has only *just* got (very old) features required for high performance networking, like SACK.

      Are YOU joking? There is no use for SACK in high performance networking. If there is a packet loss - there is no high performance with SACK or without.

    22. Re:Sounds great by jrockway · · Score: 1

      I guess I'm just used to the GNU utils. I tried to do a cp -a /dir /dir2 in OS X and it didn't recognize the -a option. Apparently -dpR is the same, but I didn't know that until I did an info cp on my GNU system.

      As for getopt_long, it is really convenient for non-shell-script tasks. I mostly like the auto-completion. I like to be able to type:

      tar --check-l --tot --blo

      when i mean

      tar --check-links --total --block-number

      That's obviously a random example, but I still enjoy that functionality.

      --
      My other car is first.
    23. Re:Sounds great by Anonymous Coward · · Score: 0

      You are obviously clueless. It is a requirement for any long distance, high bandwidth pipe.

    24. Re:Sounds great by Anonymous Coward · · Score: 0

      Is that REALLY a major issue with todays larger memory sizes? And isn't it just a little shaddy to compare a statically liked app to a dynamic app?

    25. Re:Sounds great by dmiller · · Score: 1

      Is that REALLY a major issue with todays larger memory sizes?

      I don't know for you, but it does matter to me.

      And isn't it just a little shaddy to compare a statically liked app to a dynamic app?

      You have this backwards. Staticly linked binaries would normally be expected to be *bigger* than dynamic ones. Static BSD /bin/sh is half the size of a dynamic /bin/bash.

    26. Re:Sounds great by Anonymous Coward · · Score: 0

      That is true, but a somewhat common reason to use BSD over linux is that it static links all executables that are need for system recovery which is why I though you posts it as all that crap wasn't need to prove the point about which one was bigger.

    27. Re:Sounds great by SillyNickName4me · · Score: 1

      Next time you happen to encounter a unix like system (other then Linux that is) *I suggest you try the man command.

      man cp would have told you exactly what you needed to know.

    28. Re:Sounds great by SillyNickName4me · · Score: 1

      > Let's see. ......
      > all employ full time staff to work just on the
      > Linux kernel. Apart from hundreds of other small
      > companies, governments, educational institutes,
      > thousands of volunteers.

      Ever heard what too many cooks do to a potentially good dish?

      Seems rather appropriate in case of Linux...

    29. Re:Sounds great by Anonymous Coward · · Score: 0

      Oh yeah?

      Well, mister gourmet kernel connoisseur, what do you think qualifies you to say that?

      Let me see... I suppose you think FreeBSD is cool and most scalable and has the best networking stack and is the fastest and most sable and second most secure (behind OpenBSD, of course) and best engineered and consistient and cool and best networking stack, and most stablest operating system evar, right?

      Nice. Linux must suck, eh?

    30. Re:Sounds great by SillyNickName4me · · Score: 1

      > Let me see... I suppose you think FreeBSD is cool and most scalable and has the best networking stack and is the fastest and most sable and second most secure (behind OpenBSD, of course) and best engineered and consistient and cool and best networking stack, and most stablest operating system evar, right?

      Nope, neither do I think Linux qualifies for all those. Both systems have their merrits and disadvantages.

      What I was pointing at here is that the fact that a zillion peopel are involved can be as much a disadvantage as an advantage, and as a result is a stupid argument to make.

      > Nice. Linux must suck, eh?

      I do commercial support on both Linux and FreeBSD, I run both for commercial and private purposes also and I maintain a small Linux distribution together with a friend (as well as maintaining my own variation on the FreeBSD distribution)

      I have been using both systems since the first half of the 90s (pre 1.0 versions of linux and 2.0 beta of FreeBSD were the first versions I worked with)

      I have made contributions (abeit small ones) to both systems.

      I do think I have some background here. Now, what do you have to base yourself on? claims from an AC who doesn't even provide anything like an argument or background for making those claims are pretty silly.

      It seems to me that when you replace FreeBSD with Linux in your post, you exactly get the opinion of zealots like you.

      What I find rather hilarious is how stupid some (luckily by far not all) Linux fans respond to anything that might be remotely critical of Linux.

    31. Re:Sounds great by Anonymous Coward · · Score: 0

      > What I was pointing at here is that the fact that a zillion peopel are involved can be as much a disadvantage as an advantage, and as a result is a stupid argument to make.

      No you didn't. You said (maybe indirectly) that the Linux kernel was being mucked up by having too many people working on it.

      [snip]

      > What I find rather hilarious is how stupid some (luckily by far not all) Linux fans respond to anything that might be remotely critical of Linux.

      What I find very hilarious is that BSD zealots who are now trying to claim that Linux must be worse because it has *more* people working on it. They have absolutely no shame in lying through their teeth even when everyone is laughing at them... all to get the last word on a stupid web forum.

      *You know who you are*

    32. Re:Sounds great by SillyNickName4me · · Score: 1

      > No you didn't. You said (maybe indirectly) that the Linux kernel was being mucked up by having too many people working on it.

      I implied that that might well be possible yes.

      > What I find very hilarious is that BSD zealots who are now trying to claim that Linux must be worse because it has *more* people working on it.

      Lack of direction, lack of knowing what you can count on with Linux? yes, those are issues when using and supporting it, and can directly be linked to the huge diversity of people working on it and their conflicting priorities.

      More people working on it also means more resources.

      What works out better is not that easy to say, and depends a lot on what you need.

      I do know that for me it is approx 30% cheaper to support a FreeBSD server instead of a functionally equivalent Linux setup simply because of the lack of structure in Linux (which results directly from the diversity of people working on it)

      I also know that it is easier (and as a result cheaper) for me to support a linux desktop on some random piece of hardware exactly because of the same diversity.

      For the rest, if your claim about 'BSD zealots' were true, that would just make it a typical case of pot and kettle.

      - Look at which slashdot section this is posted in
      - Look at the original post I replied to.

      What does it have to do there other then trying to do the exact same thing you are accusing 'BSD zealots' of?

      At any rate, reply to this if you feel so inclined to having the last word, but unless you actually provide some kind of argument and back it up (as opposed to making assumptions which are based on very little and are factually wrong), I'll ignore your replies.

    33. Re:Sounds great by Anonymous Coward · · Score: 0

      > I implied that that might well be possible yes.

      No, you implied that that actually was the case. You said words to the effect of "too many people mess things up, that applies to linux".

      > Lack of direction, lack of knowing what you can count on with Linux? yes, those are issues when using and supporting it, and can directly be linked to the huge diversity of people working on it and their conflicting priorities.

      You are a fine person to accuse me of baseless and factually wrong claims. What lack of direction in Linux? As opposed to what in FreeBSD? How can it be directly linked to the people working on it?

      > I do know that for me it is approx 30% cheaper to support a FreeBSD server instead of a functionally equivalent Linux setup simply because of the lack of structure in Linux (which results directly from the diversity of people working on it)

      Again, back up these claims: what lack of structure, how does it link directly to the people, how is FreeBSD different?

      > At any rate, reply to this if you feel so inclined to having the last word, but unless you actually provide some kind of argument and back it up (as opposed to making assumptions which are based on very little and are factually wrong), I'll ignore your replies.

      I suggest you practice what you preach, my good man.

    34. Re:Sounds great by SillyNickName4me · · Score: 1

      > No, you implied that that actually was the case. You said words to the effect of "too many people mess things up, that applies to linux".

      I refered to a well known saying. If you have too many people working on something, that does not result in better results, more likely in worse results.

      That was an answer to the implication in the parent post that more people means better results by definition.

      And yes, that implies that this could well be the case for Linux.

      > You are a fine person to accuse me of baseless and factually wrong claims. What lack of direction in Linux?

      It is a little while ago now, but I'd suggest reading up on the VM related discussions with regards to Linux for a nice example.

      I'd also suggest looking at how many Linux distributions come with their own collection of kernel patches.

      The later is a direct result of too many different people/organisations with different priorities.

      It is also a direct cause of it beign more expensive to support for me. The only way around that is to support one single distribution only.

      > As opposed to what in FreeBSD?

      A single distribution, features that are claimed to be there actually work (ACLs, large file support, complete pthread support to just name some examples)

      > How can it be directly linked to the people working on it?

      Again, check out for example the VM situation in 2.4

      > Again, back up these claims: what lack of structure, how does it link directly to the people, how is FreeBSD different?

      I clearly stated that those were my personal experience. It is what applies to my situation, yours may be different.

      The lack of structure was a claim independent of my experience, but for example FreeBSD gives you a clear and easy to handle source tree, including ALL tools you need to build it and all tools that depend on it. In case of Linux, I need to go collect the kernel source, binutils, filesystem utils, correct compiler etc from different places (not even talking about 'normal' userland tools here)

      In case of FreeBSD those have been tested together, and produce a predictable result. You also simply do not have to put efford into ensuring you get everything in the correct versions yourself.

      For as far as the kernel itself goes, I'd for example take a peek at how support for removable media and ide cd devices etc works. The same applies for non-ethernet network devices for example.

      FreeBSD uses CAM for supporting anythign that can work as if it is a scsi device, instead of needing a zilion different layers depending on what physical connection the device happens to have (scsi over ide to just point you at one specific example)

      FreeBSD uses netgraph for supporting any type of networking interface, providing for a structured way of defining and supporting network interfaces without having to deal with their physical properties, whereas Linux has a slightly different layer for each type of network interface (and doesn't support somewhat relevant things like PPPoE without a 3rd party tool)

      It of course may have to do with lack of design capabilities but I honestly do not believe that is the case with the core Linux developers. The only alternative explanation I can see is too many people workign on similar things independently and not integrating their work properly.

      Glad to see that at least you are willing to discuss and left the name calling and assumptions out. I am quite willing to discuss as well in that case.

    35. Re:Sounds great by Anonymous Coward · · Score: 0

      >> You are a fine person to accuse me of baseless and factually wrong claims. What lack of direction in Linux?

      >It is a little while ago now, but I'd suggest reading up on the VM related discussions with regards to Linux for a nice example.

      That isn't lack of direction, there were problems with the page scanning code and so it was replaced with a better version. Yes it was unfortunately a stable kernel series and that wasn't good at all, but the alternative was to either fix it or always have an unstable "stable" series. That doesn't say anything about lack of direction.

      Note that the problems were with "highmem" (i386 PAE) systems with more than 4GB of memory. A configuration which FreeBSD didn't even support until years later. And you could forgive the VM developers this because they'd never really had access to these big systems before.

      > I'd also suggest looking at how many Linux distributions come with their own collection of kernel patches.

      > The later is a direct result of too many different people/organisations with different priorities.

      Why would that be "too many"? You've skipped the "lack of direction" question, and made this assertion. What is the problem with having different vendors offer different sets of kernel patches.

      > It is also a direct cause of it beign more expensive to support for me. The only way around that is to support one single distribution only.

      What was the last thing you had to do differently because two vendors offered different kernel patches? How much did it cost you?

      >> As opposed to what in FreeBSD?

      > A single distribution, features that are claimed to be there actually work (ACLs, large file support, complete pthread support to just name some examples)

      Excuse me? complete pthread support? Not likely. FreeBSD 4 is nowhere near it, even FreeBSD 5 doesn't offer complete pthread support. In Linux it is about as complete as it comes.

      >> How can it be directly linked to the people working on it?

      >Again, check out for example the VM situation in 2.4

      As I said, this wasn't lack of direction. I suggest you look at the fiasco that is FreeBSD 5. Their operating system is *years* late, and the lack of direction splintered its developers (yes, including resignations and a fork).

      >> Again, back up these claims: what lack of structure, how does it link directly to the people, how is FreeBSD different?

      > I clearly stated that those were my personal experience. It is what applies to my situation, yours may be different.

      It appears you were trolling though.

      > The lack of structure was a claim independent of my experience, but for example FreeBSD gives you a clear and easy to handle source tree, including ALL tools you need to build it and all tools that depend on it. In case of Linux, I need to go collect the kernel source, binutils, filesystem utils, correct compiler etc from different places (not even talking about 'normal' userland tools here)

      No, practically every distribution comes with source CDs. Debian, Gentoo, (and I think SuSE, RedHat, Mandrake but no 1st hand experience) the complete source trees are downloadable and buildable.

      > In case of FreeBSD those have been tested together, and produce a predictable result. You also simply do not have to put efford into ensuring you get everything in the correct versions yourself.

      Nor do you in any Linux distro. And they've all been tested together as well.

      > For as far as the kernel itself goes, I'd for example take a peek at how support for removable media and ide cd devices etc works. The same applies for non-ethernet network devices for example.

      Linux kernel is fully device hotplug capable for hardware that supports it.

      > FreeBSD uses CAM for supporting anythign that can work as if it is a scsi device, instead of needing a zilion different layers depending on what physical connection the device happen

    36. Re:Sounds great by SillyNickName4me · · Score: 1

      > That isn't lack of direction, there were problems with the page scanning code and so it was replaced with a better version. Yes it was unfortunately a stable kernel series and that wasn't good at all, but the alternative was to either fix it or always have an unstable "stable" series. That doesn't say anything about lack of direction.

      > As I said, this wasn't lack of direction. I suggest you look at the fiasco that is FreeBSD 5. Their operating system is *years* late, and the lack of direction splintered its developers (yes, including resignations and a fork).

      > Why would that be "too many"? You've skipped the "lack of direction" question, and made this assertion. What is the problem with having different vendors offer different sets of kernel patches.

      > What was the last thing you had to do differently because two vendors offered different kernel patches? How much did it cost you?

      The last time was when I had to figure out why the fuck some RH 2.4.x based kernel worked slightly differently then a Gentoo one (my normal testing environment) for a for my customer relevant situation. It costed approx 2 hours to figure out where the exact difference was between 2 kernels with identical version numbers, both compiled with identical options, but not from the exact same source (redhat patches)

      Supposed purpose of a 'stable' version, provide a stable version.

      Reality in the Linux kernel was implementing something that was not proven and could not be considered stable yet (the vm).

      I consider that lack of direction.

      I don't blame the developers for not getting it right the first time around, but I do consider having this happen in what is supposedly a stable version to be a major issue.

      What happened with FreeBSD 5 happened in the development release, not in something that was supposedly stable and ready for normal use.

      It gets released when it is ready as opposed to when it is convenient for marketing reasons.

      There will always be issues that result in controversy and disagreement. FreeBSD keeps that out of the stable releases that peopel count on, and breaking the binary interface in stable releases is not done.

      Linux has not been able to keep that out of stable releases, and has had multiple cases of breaking binary interfaces in supposedly stable versions.

      As for pthread support, FreeBSD 4.x lacks kerel schedulable units and can be said to not be fully pthread compliant.

      With regards to Linux and FBSD and pthread support, a nice bit of dicussion can be found at http://kerneltrap.org/node/view/422 for example.

      FreeBSD 5.x is as possix threading complient as it gets while Linux suffers from some small issues regarding signalling (officially fixed when usign 2.6 and the new phtread library, but that breaks all old apps that use libpthread)

      > Linux kernel is fully device hotplug capable for hardware that supports it
      > Linux doesn't need "a zillion" layers. Linux uses SCSI for everything other than PATA controllers, which it uses a seperate IDE layer for. 2. FreeBSD also has an IDE layer.

      Ah, tell me then how to get an ide cd/dvd burner to work without the 'ide-scsi' hack.

      And yes, FreeBSD has an ide layer as well, but for any relevant devices this neatly plugs into the underside of CAM.

      > No it doesn't

      You obviously never saw how netgraph works, so I'll excuse you for not realizing the difference and not seeing how linux does in fact provide a zilion similar layers instead of one.

      Tell me, how do you get pppoe to work without the rp-pppoe package? just saying it does, does not prove anything at all, and anything I can find on google as well as my own experience tell me I need that 3rd party package to get it to work.

      Just in case you want to know, on a stock FreeBSD machine, you load the pppoe kernel module and it works. No compilation needed, no external packages needed, nothing of that all.

      Again, calling yes/no makes for unfounded claims. Back them up or shutup. If you do not have anything to contribute in the BSD section other then proclaiming Linux superiority, without backing up your claims, then you are the troll here my friend.

    37. Re:Sounds great by Anonymous Coward · · Score: 0

      >> What was the last thing you had to do differently because two vendors offered different kernel patches? How much did it cost you?

      > The last time was when I had to figure out why the fuck some RH 2.4.x based kernel worked slightly differently then a Gentoo one (my normal testing environment) for a for my customer relevant situation. It costed approx 2 hours to figure out where the exact difference was between 2 kernels with identical version numbers, both compiled with identical options, but not from the exact same source (redhat patches)

      Yeah you're just making this up because you don't have an answer. What was this "slight difference", and why did you have to figure it out, eh? Come on, you challenge me to provide facts, you haven't provided a single one.

      > Supposed purpose of a 'stable' version, provide a stable version.

      > Reality in the Linux kernel was implementing something that was not proven and could not be considered stable yet (the vm).

      > I consider that lack of direction.

      It was not known at the time. FreeBSD 4.10 was released with a bug that corrupted large files with softupdates turned on, and terrible SMP instability. This was introduced *after* it had been stable for a long time!!

      > What happened with FreeBSD 5 happened in the development release, not in something that was supposedly stable and ready for normal use.

      Well it is supposed to be going stable in a few weeks. Their schedulers are broken, kernel preemption is broken, disk performance is crap, scalability is no good, etc etc.

      > It gets released when it is ready as opposed to when it is convenient for marketing reasons.

      The Linux kernel has never been released for "marketing" reasons. Linus has never even worked for a company that markets Linux.

      > There will always be issues that result in controversy and disagreement. FreeBSD keeps that out of the stable releases that peopel count on, and breaking the binary interface in stable releases is not done.

      Linux does not break the user/kernel interface either. In fact, you can run binaries 10 years old on a Linux 2.6 kernel.

      > As for pthread support, FreeBSD 4.x lacks kerel schedulable units and can be said to not be fully pthread compliant.

      Ok, so the latest stable FreeBSD is not pthread compliant.

      > With regards to Linux and FBSD and pthread support, a nice bit of dicussion can be found at http://kerneltrap.org/node/view/422 for example.

      That is 2 years old, and way before Linux 2.6 was released. It was close to the start of the Linux 2.5 development cycle.

      > FreeBSD 5.x is as possix threading complient as it gets while Linux suffers from some small issues regarding signalling (officially fixed when usign 2.6 and the new phtread library, but that breaks all old apps that use libpthread)

      No that doesn't break all old apps that use libpthread. Why do you just claim that sort of FUD? FreeBSD 5 actually cannot pass the NPTL compliance test suite.

      > Ah, tell me then how to get an ide cd/dvd burner to work without the 'ide-scsi' hack.

      cdrecord dev=/dev/hda

      > You obviously never saw how netgraph works, so I'll excuse you for not realizing the difference and not seeing how linux does in fact provide a zilion similar layers instead of one.

      Linux has one interface. It is accessable through ifconfig, ip, etc. It has a number of layers (sockets, tcp, ip, ethernet, tunnels, etc). If FreeBSD didn't have the same layers it would be useless. Tell me what you you mean by Linux having a zillion layers.

      > Tell me, how do you get pppoe to work without the rp-pppoe package? just saying it does, does not prove anything at all, and anything I can find on google as well as my own experience tell me I need that 3rd party package to get it to work.

      apt-get install pppoe

      > Again, calling yes/no makes for unfounded claims. Back them up or shutup. If you do not have anything to contr

    38. Re:Sounds great by SillyNickName4me · · Score: 1

      > Yeah you're just making this up because you don't have an answer. What was this "slight difference", and why did you have to figure it out, eh? Come on, you challenge me to provide facts, you haven't provided a single one.

      RH 2.4.22 kernel properly supported acpi while gentoo with a 2.4.22 kernel did not. RedHat imported patches from the 2.4.23 pre series.

      > The Linux kernel has never been released for "marketing" reasons. Linus has never even worked for a company that markets Linux.

      Linus releases things when he believes them ready, agreed there. That said, in both Linux and FreeBSD things come as they come, and the argument of 'too late' doesn't seem to make sense in either case. Maybe you should learn a bit about sarcasm here.

      > That is 2 years old, and way before Linux 2.6 was released. It was close to the start of the Linux 2.5 development cycle.

      The issues being discussed are still relevant, most importantly, signal delivery to threads.

      > No that doesn't break all old apps that use libpthread. Why do you just claim that sort of FUD? FreeBSD 5 actually cannot pass the NPTL compliance test suite.

      Hmm, you are right indeed that it doesn't break all of them, only those that rely on the old way of signal delivery.

      > cdrecord dev=/dev/hda

      Thanks, hadn't tried that for some time now, and on my 'modern' workstation it indeed works with the 'atapi' support only (it had failed on my server without the ide-scsi 'hack'). See, providing actual arguments can be informative and makes discussing worthwhile.

      > Linux has one interface. It is accessable through ifconfig, ip, etc. It has a number of layers (sockets, tcp, ip, ethernet, tunnels, etc). If FreeBSD didn't have the same layers it would be useless. Tell me what you you mean by Linux having a zillion layers.

      Sorry, that was bad wordign on my side. Should have said, has a zillion similar implementations of the interface.

      > apt-get install pppoe

      So I do have to install an external package for it. That is not goign to be very helpfull really when for example doing a network install over a dsl connection.

    39. Re:Sounds great by Anonymous Coward · · Score: 0

      > RH 2.4.22 kernel properly supported acpi while gentoo with a 2.4.22 kernel did not. RedHat imported patches from the 2.4.23 pre series.

      Took you a while to make something up. Now make up reasons why it was causing your clients trouble, and why it took you two hours to fix it.

      You also lied about "having the exact same version numbers", because redhat applies a local versioning scheme to their kernels. Liar.

      > Linus releases things when he believes them ready, agreed there. That said, in both Linux and FreeBSD things come as they come, and the argument of 'too late' doesn't seem to make sense in either case. Maybe you should learn a bit about sarcasm here.

      Huh?

      >> That is 2 years old, and way before Linux 2.6 was released. It was close to the start of the Linux 2.5 development cycle.

      > The issues being discussed are still relevant, most importantly, signal delivery to threads.

      But any problems on there would have already been fixed. If you are talking about changing behaviour, it would have been changed to *conform* to standards, not the other way round.

      >> No that doesn't break all old apps that use libpthread. Why do you just claim that sort of FUD? FreeBSD 5 actually cannot pass the NPTL compliance test suite.

      > Hmm, you are right indeed that it doesn't break all of them, only those that rely on the old way of signal delivery.

      Non standard behaviour? Well coded apps shouldn't be relying on that. I don't know of 1 breakage due to NPTL. What are a the problems you've been seeing?

      >> cdrecord dev=/dev/hda

      > Tanks, hadn't tried that for some time now, and on my 'modern' workstation it indeed works with the 'atapi' support only (it had failed on my server without the ide-scsi 'hack'). See, providing actual arguments can be informative and makes discussing worthwhile.

      WTF? That wasn't an "actual argument". I was applying a cluebat to your FUD. I stated a simple fact, buddy.

      > Sorry, that was bad wordign on my side. Should have said, has a zillion similar implementations of the interface.

      In what way does Linux have a zillion similar implementations of the interface and FreeBSD not? Provide me with an "actual argument".

      >> apt-get install pppoe

      > So I do have to install an external package for it. That is not goign to be very helpfull really when for example doing a network install over a dsl connection.

      It isn't a *3rd party* package, like you tried to claim. In fact, it isn't even an external package if you're talking about the entire operating system (not just the kernel). But there is nothing wrong with doing things in userspace. There are thousands of things FreeBSD needs userspace packages for to run an install. Starting with libc.

  9. WIll this make it to Mac OS X? by AIXadmin · · Score: 2, Interesting

    The more interesting thing for me is: Will these enhancements make it to Mac OS X?

    As far as I am concerned, the closer Mac OS X under the hood, makes itself closer to FreeBSD the better.

    1. Re:WIll this make it to Mac OS X? by psyconaut · · Score: 1

      Good question.

      While Jordan still works at Apple AFAIK, my understanding is that OSX has branched significantly from FreeBSD now. So it's definitely not much of a drop-in replacement.

      That said, no reason why stuff can get selectively ported...there are definitely some things in this release that I could see being nice for the Mac:

      - Arbitary interface naming
      - Better VLANs

      -psy

    2. Re:WIll this make it to Mac OS X? by ArbitraryConstant · · Score: 4, Informative

      Unlikely.

      a) While MacOS X libraries are from FreeBSD, Darwin (the kernel) is Mach derived and has very little to do with the FreeBSD kernel. The same tricks might work if they were ported, but that would be more of a rewrite with the same concepts rather than a port.

      b) Who in their right mind uses MacOS X for routing? Serving, fine, but actual network infrastructure? I highly doubt it.

      --
      I rarely criticize things I don't care about.
    3. Re:WIll this make it to Mac OS X? by stab · · Score: 3, Informative

      While MacOS X libraries are from FreeBSD, Darwin (the kernel) is Mach derived and has very little to do with the FreeBSD kernel.

      That's not true. The FreeBSD network stack is used in Darwin with a compat layer. Look at OpenDarwin's cvsweb for an example.

    4. Re:WIll this make it to Mac OS X? by AIXadmin · · Score: 1

      Actually the kernel in Mac OS X is a merge between mach and FreeBSD. The networking stack takes a ton of code from FreeBSD. I remember at WWDC 2 years ago where they were talking about how the kernel networking stack was largely derived from 4.3 and and had even taken some code from 5.0.

      Not many people use Mac OS X for routing. But people do use it for VPN servers, and NAT servers on smaller networks. Even though they would do better with just buying a one-hundred dollar SOHO router.

      FreeBSD and Mac are still kissing cousins.

    5. Re:WIll this make it to Mac OS X? by ArbitraryConstant · · Score: 1

      Okay, well I was clearly wrong about what I said. Thanks to all the corrections (3 of them as of now.).

      Still-- I don't know anyone that uses MacOS as a router that will see an Mpps.

      --
      I rarely criticize things I don't care about.
    6. Re:WIll this make it to Mac OS X? by AIXadmin · · Score: 1

      No you wont see it, if you are seeing Mpps. Go by something from Cisco. =)

    7. Re:WIll this make it to Mac OS X? by ArbitraryConstant · · Score: 1

      You might need something else if you want a decent firewall... but no stateful firewall is going to give you an Mpps. There's just no way.

      --
      I rarely criticize things I don't care about.
    8. Re:WIll this make it to Mac OS X? by bofkentucky · · Score: 1

      Today yes. Tomorrow, who knows? Mr. Moore and his wacky law seem to work through problems like that, given enough time.

      --
      09f911029d74e35bd84156c5635688c0
  10. Re:My personal experience with FreeBSD by hugo_pt · · Score: 2, Insightful

    your ignorance is great, pf is already ported to FreeBSD for quite some time as a kernel loadable module, and it will be integrated with 5.3-RELEASE. Have you copy-pasted a FreeBSD flaming text a year old ?

    Please.

  11. Re:Playground r00lz for OSS Hackers? by mosel-saar-ruwer · · Score: 1

    Linux uses *very* dumb routing algorithms at the moment. There is a fair amount of public research on much smarter mechanisms (one of which I guess FreeBSD would have used).

    Thanks.

    Listen - do you know of any good texts or treatises that describe these [new] mechanisms?

  12. Re:My personal experience with FreeBSD by Homology · · Score: 1
    your ignorance is great, pf is already ported to FreeBSD for quite some time as a kernel loadable module, and it will be integrated with 5.3-RELEASE. Have you copy-pasted a FreeBSD flaming text a year old ?
    Please.

    Of course the trolls just copy/paste/edit, and it's a sign of their inferior and feeble mind. Not that they have any mind at all; it's just mindless copy/paste/edit, when they manage not to bungle the "edit" too much.

    Most of them don't even do a copy/paste/edit : they download a script that does all the work for them. Quite frankly, I'm not sure that they are capable to do a copy/paste/edit. This is why you never see any spark of intelligence or originality in their posting; it's the same post over and over and over and over and over again.

  13. Damn... by JamesTRexx · · Score: 1

    Reading through the presentation I realised I'll be reinstalling my FreeBSD firewall again after 5 becomes officially STABLE, heh.
    Yes, I always do a fresh install and not an upgrade.

    --
    home
    1. Re:Damn... by Anonymous Coward · · Score: 0

      It runs faster if you do a cvsup of the source to upgrade, because you can compile it optimised for your CPU.

  14. We survived a DoS on .edu network by agent+dero · · Score: 3, Interesting

    I read some comments on "it is likely you'll be able to through Mpps at it?"

    YES, it's happened to us, here on our university boxen, somebody got r00ted, and _crackers_ got in through some backdoors on a LOT of machines, then started DoS'ing my department, we have a small P-II 5.2.1 box tossing packets like nobody's business.

    When the college network runs mostly Gigabit, Mpps is a plausible measure of connectivity.

    --
    Error 407 - No creative sig found
  15. That's exactly the point by Santana · · Score: 2, Insightful

    You've got it. Unlike what is perceived from Linux (all software must be free), BSD is about making all software better. That's the benefit of the BSD license that many people (usually GPL fans) don't understand.

    --
    The best way to predict the future is to invent it
    1. Re:That's exactly the point by Anonymous Coward · · Score: 2, Insightful

      Sometimes I'm amazed by Linux developers humbling asking to use my software. "Go right ahead," I tell them, "That's why I put it under the BSD license!" But they still don't get it. While I appreciate the asking, it still find it strange that I get an email about once a quarter asking me to release my BSD licensed work under the GPL so it can be used in GPL projects.

      I guess it's hard for users of a "members only" license to grok the concept of "free for everyone".

    2. Re:That's exactly the point by Trepalium · · Score: 1

      Part of it is etiquette, and the other part is some BSD license fanatics who insist their software can not be relicensed under the GPL. By asking, even if you can fairly safely assume the answer is yes, you avoid nasty situations like that. Most of the people who support the BSD license are reasonable just like most of the people who support the GPL license are reasonable. It's the extremists that are a bit of a problem.

      --
      I used up all my sick days, so I'm calling in dead.
    3. Re:That's exactly the point by ArbitraryConstant · · Score: 1

      Any of the newer BSD licenses is GPL compatible, so you can relicense it to the GPL as you please, no permission necessary. This is the same as a company "stealing" the code and selling it in a commerical product.

      GPLing BSD code doesn't really "protect" it though. You can't strip the copyright notice off, so anyone that wants to use it can find out where it came from and grab the original to use however they like. It protects any changes made to the GPLed version, but those changes can't be released into the BSD licensed original either.

      --
      I rarely criticize things I don't care about.
    4. Re:That's exactly the point by Brandybuck · · Score: 3, Informative

      Actually you CANNOT relicense BSD code under the GPL. I don't think you understand what "relicense" means. It means to remove the BSD license from the code completely. No Open Source license allows relicensing.

      What you can do, however, is to redistribute BSD licensed code under the GPL. You can also license your own derivative works under the GPL. But you certainly may not take BSD licensed code and file off the license.

      --
      Don't blame me, I didn't vote for either of them!
    5. Re:That's exactly the point by Tony-A · · Score: 1

      It protects any changes made to the GPLed version, but those changes can't be released into the BSD licensed original either.

      Part of the reason for the etiquette is to arrange things so that if the changes are worthwhile they will be released into the BSD licensed original. Being easy to fork does not mean that it's desirable to fork. Whatever is desirable in a fork stands a much higher chance of survival if it is incorporated into the main line that if it orphans itself. If the main-line is BSD licensed, a GPL-only fork is unsupportable if the changes are minor.

  16. Yes, this will make it to Mac OS X by Anonymous Coward · · Score: 1, Informative

    The networking functionality of Mac OS X is in fact derived from BSD, FreeBSD in particular. There is actually a fair bit of FreeBSD kernel stuff in the Mac OS X kernel, and you can see this in the Darwin source code:

    http://gobsd.com/code/darwin/
    http://gobsd.com/code/darwin/xnu/bsd/
    http://gobsd.com/code/darwin/xnu/bsd/net/

  17. Re: torstenvl (769732) (#10158823) by Anonymous Coward · · Score: 0

    b) Even if they did take *actual code* from DragonflyBSD, the BSD license doesn't require attribution any longer.

    Wow. You are so very deluded. You most certinly do require this. The advertising clause was in fact removed, but you still have to give credit to the authors, and muct agree not to sue them if the code breaks or does not work as advertised before you can use it.

    Don't be a troll.
    I suggest that you lear to read, because you got it quite backwards.

  18. About FreeBSD and Mac OS X by Anonymous Coward · · Score: 2, Informative

    Sadly it seems that people here are very ignorant about the connection between FreeBSD, and Mac OS X, especially where the Mac OS X kernel is concerned. There are a few people here that are claiming that there is not FreeBSD code in the Darwin kernel, only in the Mac OS X command line apps, and this is blatantly untrue.

    In order to better see just how much FreeBSD code there is in the Darwin/Mac OS X kernel, and how relevant this work in FreeBSD will be to Mac OS X, please read the following links:

    http://www.kernelthread.com/mac/osx/
    http://gobsd.com/code/darwin/xnu/
    http://www.apple.com/ca/macosx/features/darwin/
    http://developer.apple.com/darwin/

    Seriously, with so much documentation available, it's unacceptable for supposedly technical people involved with BSD to not know just how important BSD code is to the kernel of a very nice, and hardly secret or obscure operating system like Mac OS X.

    1. Re:About FreeBSD and Mac OS X by Anonymous Coward · · Score: 0

      Every anti-freebsd zealot like to make mac os x, a very well known system, apart from its origin.
      Mac os X is based on darwin, that is mostly based on freebsd. Don't try to take the credit out of freebsd.

  19. The world's best firewall is *not* OpenBSD by Anonymous Coward · · Score: 1, Informative

    While I am mostly in agreement with you about Linux being crap compared to OpenBSD security wise, your statement regarding nothing beating OpenBSD as a firewall is pure bunk.

    The Sidewinder G2 firewall implemented on top of "Secure OS" (a BSDi derived OS developed by the people who co developed the technology used by the NSA's "Security Enhanced Linux" has not yet been compromised, and has recently achieved full EAL4+Common Criteria (CC) certification. It is unlikely that OpenBSD will ever do that.

    Had I the money, I would use nothing else myself, as Secure OS is *Hard Core* Military grade security built into a BSD OS.

    http://www.securecomputing.com/news_display.cfm?ni d=466&lang=en

    Read. Learn. Grow.

    1. Re:The world's best firewall is *not* OpenBSD by Anonymous Coward · · Score: 0

      The original comments were correct. Unless you can point me to a copy of the Sidewinder Source Code, I'd have to say that your comments about it are pure bunk.

      "Read. Learn. Grow"

      I'd love to, if you can point me to a copy of the source. Otherwise, you're asking me to trust something blindly, which is an approach that hasn't been successful in the real world.

      So, please either put up or shut up. Thanks. Until then, OpenBSD is still the best.

  20. Re: torstenvl (769732) (#10158823) by torstenvl · · Score: 1

    Please refrain from personal attacks.

    I realized that my wording was off as soon as I hit Submit, but I decided not to post a reply to it as most intelligent people would be able to figure out what I meant.

    The BSD license _never_ required "attribution" except to the original copyright holders. There is no requirement beyond that, and never has been. For some reason I thought there had been, and I forgot to change the paragraph text after reading the license and realizing my mistake. I'm sure you've made editing mistakes as well.

    As far as being a troll, I most certainly am not. A troll spouts off at the mouth trying to get emotional responses. A troll does not lay out organized lists of specific opinions and a troll does not then back up those opinions with sources. Please see http://en.wikipedia.org/wiki/Internet_troll, specifically "Many posts may inadvertently cause strife as collateral damage, but they are not trolls."

    Certain Slashdot moderators would do well to read this as well.

  21. Re: torstenvl (769732) (#10158823) by Anonymous Coward · · Score: 0

    There is no requirement beyond that, and never has been.

    Tsk, Tsk, Tsk. There you go again, "inadvertantly" spreading misinformation!

    Basically and fundamental to all variants of the BSD license are *both* the attribution (not claiming that you wrote what you did not, as well as giving credit where credit is due) as well as the disclaimer of liability, which is standard to pretty much all software licenses.

    With your latest post, you've managed to bungle things again. Care to try for a third time?

  22. Re: torstenvl (769732) (#10158823) by torstenvl · · Score: 1

    I said it is not required *except* to the original copyright holders. If I make change X to program Y, and submit that change back to the owners of program Y, they are not required by the license under which they put program Y to give attribution in the source or documentation of program Y to me for change X. They are not required to do so. Period. You see, the thing with the BSD license is that it isn't "viral" like the GPL. It applies to the original and not to derivative works. If I want attribution like that I have to separately license my changes back to the original authors, which, depending on the size of my modifications, could be either wise or very petty. Kind of like you're being. Petty, I mean.

  23. Comment removed by account_deleted · · Score: 3, Informative

    Comment removed based on user account deletion

  24. Little Known Facts by Anonymous Coward · · Score: 0

    Beginning with the Jaguar release, Mac OS X has been based on the Linux microkernel. *BSD was dumped because of stability problems it caused, and because its code was so krufty it made maintenance a nightmare.

    Also, Mike Smith's employment at Apple was terminated in early August after a hallway fistfight over coding styles. He is now working as a contractor writing Python for a Salinas, CA sanitation company.

  25. Where is Scott Bradner when you need him? by Anonymous Coward · · Score: 0

    The industry standard used to be Scott Bradner at Harvard. Every year at Comdex, he would give an after hours presentation on the latest performance tests. He had some great scripts that measured rates for different size packets, and drew graphs. I watched him once, enjoyed his description of one vendor's box " a network diode - packets came in, never went out" as he ranted about them testing stuff before they brought it to his benchmark lab.

    It was interesting to see the various sales guys either happy or miserable when they looked at his handout on performance benchmarks of stuff brought to his lab, depending on who was at the top or bottom.

    But it costs money to run the tests, and most of the BSDs don't have an incentive to test, since it won't really do more than bragging rights. Would cisco like to find out that FBSD runs faster?

  26. Re:Playground r00lz for OSS Hackers? by Anonymous Coward · · Score: 1, Funny

    Because FreeBSD has a grown-up license [i.e. a license written by grown-ups, as opposed to a license written by Peter Pan Syndrome utopian-fantasist fifty-year-old teenagers],

    Wow.

    Whos' bitter now?

  27. Re: torstenvl (769732) (#10158823) by Anonymous Coward · · Score: 0

    Ahh, another "GPL is like a virus" troll.

    I think the moderators had you figured out from the beginning, asshole.

  28. Re: torstenvl (769732) (#10158823) by Anonymous Coward · · Score: 1, Informative

    It might not be required but it is at the very least part of proper social interaction. You don't just "steal" bits from somewhere else and include it in your own *BSD project.
    Now concerning the case of the DragonFly network stack, Hsu's chooses to use a time-limited advertisement clause for his code. That's his very own right to do. IIRC the reason was exactly the goingons with certain FreeBSD commiters not willing to correctly attribute his and others changes.

  29. 1Mpps? by TripWire · · Score: 0

    OK - lets cut the crap. Max 100kpps on Linux? Gosh. Thats utter bullshit. On rather 2-3 years old hardware we've pushed 300kpps through Linux. Not 1Mpps, sure, but this is old, "standard" desktopish hardware. Ie no PCI-X or anything. Plain old Athlon XP's.

    A dual Opteron, or Xeon, would probably come in close on the 1Mpps figure, if not better. It's just not that impressive anymore.

    1. Re:1Mpps? by zdzichu · · Score: 1

      Yes, Opterons are sweeter when it comes to routing. Here's excerpt from commentary on Linux netdev:

      We can certainly do better than that on Opterons. Robert
      reports a 1.3 Mpps rate on a dual opteron 1.6Ghz. Our numbers on Xeons
      are less than 1Mpps.

      --
      :wq
    2. Re:1Mpps? by Brandybuck · · Score: 1

      But is still is impressive on a 2.8 Xeon, which is what the blurb stated.

      --
      Don't blame me, I didn't vote for either of them!
  30. Re: torstenvl (769732) (#10159719) by Anonymous Coward · · Score: 0

    Kind of like you're being. Petty, I mean.

    Not true you ignorant ass clown. I am being correct. There is a difference.

  31. Re: Anonymous Coward (#10160130) by Anonymous Coward · · Score: 0

    I don't think you've the brains to be able to make any use out of source code if you can't believe the results of countless documented, failed attempts to breach the sidewinder firewall.

    GNU Zealot. Learn to think.

  32. Re: Anonymous Coward (#10160130) by Anonymous Coward · · Score: 0

    "I don't think..."

    On that we're agreed.

    And the proof that you have that there's no backdoor or buffer overflow in the code is, ahm, lacking.

    Leave the technical issues to those who understand technology please.

  33. Re: Anonymous Coward (#10160130) by Anonymous Coward · · Score: 0

    Bwahahaha. Begone Astroturfer. "Hardcore military grade" security my ass.

  34. Read the rest of the comments by Effugas · · Score: 1
    * It's impossible given this rotten design to really achieve decent
    * performance at 100Mbps, unless you happen to have a 400Mhz PII or
    * some equally overmuscled CPU to drive it.

    That being said, wow, that's a truly awful design.

    --Dan

  35. Slashdot inspires OS features! by ziegast · · Score: 1

    Seen in Slide 21 in the PDF file....

    • Compressed TIME_WAIT2 State

      TCP connections in TIME_WAIT2 state (connection closed) waiting for the 2MSL timeout maintain only a minimal set of necessary information instead of a full blown TCP control block. This saves about 80% memory per connection in that state. Especially for HTTP servers this give a far better kernel memory resource usage and a higher number of concurrent connections that can be served within a short time frame ("Slashdot effect").

    ... so now your old Pentium Pro 200MHz machine sitting in the garage can keep up with a slashdotting.
  36. ob. Life of Brian quote by BenjyD · · Score: 1

    Brian: Friends, we must unite to fight the common enemy!
    Everyone: The People's Front of Judea!? Where!

    For god's sake, they're both Unix-like operating systems. There's not a huge difference between them for most purposes, I don't think anyone who's not a complete fanbot would say either is objectively better than the other for all purposes.

  37. OpenBSD by Anonymous Coward · · Score: 0

    Focus of OpenBSD:
    Should we focus on a feature that increases performance or focus on a feature that makes it more secure? OpenBSD chooses to focus limited developer time on the security feature.

    We all benefit from that. If you use OpenSSH, thank the OpenBSD people.
    Linux, BSD, etc are all boats in the same pond. Add water, and all boats rise.

  38. NDIS in XP! by cryogenic · · Score: 1

    What'd really be funny is if MS replaced their own NDIS guts with the BSD implementation, since (*big assumption*) MS created NDIS for themselves.

  39. Re:Playground r00lz for OSS Hackers? by Too+Much+Noise · · Score: 1

    Anyway, I was wondering about the rules on this playground: How would you pull a stunt like that without losing face?

    Contrary to the impression left by all the Linux/BSD/GNU etc. zealots, releasing the code under a BSD or GPL license means there is no real OS war going on between say Linux (with or without GNU) and *BSD. The BSD license for the network stack pretty much says "here's our code - feel free to use it, find mistakes, improve on it, etc." If other operating systems (open or not) decide to ad[ao]pt it, this would be a recognition of its quality. There's no losing face in paying a compliment to someone for good code. Of course, if one has a better idea/technology/etc. for doing the same job, one does one's own implementation.

    However, childish types will only see a 'my OS is bigger than your OS' face for this.

  40. Re:Cisco comparison by Anonymous Coward · · Score: 0

    no 2600 can do 25k-50k pps in the real world. maybe the 2600 XM might be able to approach 25k pps, but that would be seriously taxing it. when you hit anywhere near any of these numbers, the router is being absolutely HAMMERED !!!

  41. That's exactly what "relicense" means by tepples · · Score: 1

    No Open Source license allows relicensing. What you can do, however, is to redistribute BSD licensed code under the GPL. You can also license your own derivative works under the GPL.

    Not everybody always uses the most precise language in informal contexts such as Slashdot. In colloquial discussion of free software, to "relicense" a work means to distribute a derivative work under a different license, often from permissive to GPL or the like.