Slashdot Mirror


OpenBSD Project Announces OpenBGPD

44BSD writes "As noted at undeadly, the OpenBSD Project has announced an BSD-licensed implementation of the Border Gateway Protocol, BGP. Project details, design goals, documentation, and more are at the project web site. BGP is documented in RFC 1771. Lucky for Cisco, BSD is dying..."

241 comments

  1. BSD License by secolactico · · Score: 4, Insightful

    Lucky for everyone else, a BSD license will make it easy to implement in every other router box and make it cheap. Or so I hope.

    --
    No sig
    1. Re:BSD License by Anonymous Coward · · Score: 1, Informative

      And also in Linux.

    2. Re:BSD License by j.a.mcguire · · Score: 0

      imagine if there was a security hole found in the open source which comes with OpenBSD that then translated into one of the embedded routers.

      eep!

    3. Re:BSD License by BJH · · Score: 5, Insightful

      As opposed to a security hole in a closed-source router... like a Cisco?

      A default username/password pair is present in all releases of the Wireless LAN Solution Engine (WLSE) and Hosting Solution Engine (HSE) software. A user who logs in using this username has complete control of the device. This username cannot be disabled. There is no workaround.

      Golly, if you had the source, you might be able to do something like... hmmm... I dunno... disable the default password, maybe?

    4. Re:BSD License by Anonymous Coward · · Score: 2, Informative

      The hole would be secured much faster than the bugs lurking in the proprietary implementations.

      On top of that, BGPd is far from being your average daemon, it only needs to talk to predefined peers with which you need to have a relationship (often in the form of a written contrat).

      OpenBGPd has some stuff in place that allows for easy implementation of the crypto enabled BGP sessions. So if you implement authentified peering you could only be crashed by one of your peers, who usually have better things to do.

    5. Re:BSD License by Moskit · · Score: 1, Troll

      Golly, if you had the source, you might be able to do something like... hmmm... I dunno... disable the default password, maybe?

      Golly, if you bothered to actually read the advisory, you would have found the sections "Software Versions and Fixes" and "Obtaining Fixed Software".

      While Cisco is closed source, at least they do publish (as in "make public") security advisories and provide quality tested and verified fixes.

      In "open source" world you would probably have had N fixes from X different people, each claiming that theirs is the best. If you want to see a real open source mess, check out Zaurus - just as an example there is a large number of libSDL ports, each different, each having different problems, each compatible with different games, none fully usable.

      "Open Source" has become nowadays a real(tm) marketing term. In many cases it just demonstrates theoretical possibilities of doing something, not the reality. It is just like those TV Sell channels when they say "our EZkook enables you to prepare thousands of fantastic meals!", everybody drools, but a tiny portion of buyers actually ever uses the tool for something more than mashed potatoes. Still, they get excited thinking about the possibilities...

    6. Re:BSD License by Anonymous Coward · · Score: 5, Informative

      GPL people are welcome to import BSD code: actually, they really should do it.
      Of course, provided they learn to give proper credits.

    7. Re:BSD License by OttoM · · Score: 4, Informative
      In "open source" world you would probably have had N fixes from X different people, each claiming that theirs is the best. If you want to see a real open source mess, check out Zaurus - just as an example there is a large number of libSDL ports, each different, each having different problems, each compatible with different games, none fully usable.

      This is not how OpenBSD works. There's only one place for official errata, and these patches are published only after carefull scrutiny.

      While you may be right for some Open Source projects, the OpenBSD team applies sound engineering techniques.

    8. Re:BSD License by Anonymous Coward · · Score: 0

      That last link is interesting, because it looks like the author of g4u is on crack. Piping the output of dd through gzip and upto an FTP site as a means of backing up your data is hardly fucking rocket science. The scripts are totally different; the g4l scripts are longer and more complicated. The g4u author totally ignores parts of g4l where apparently the author made the code worse by implicitly removing parts E.g. g4l has

      ftp -o "|gunzip -c -|dd bs=1M of=/dev/$disk" ftp://$user:$password@$server/$imgpath/$image

      Notice the lack of braces around the variables. The g4u author had it right though; he encloses his variables to avoid dodgy expansion problems. Why the hell would the g4l author go to the trouble of copying someone elses working code and then intentionally introduce a bug like that?

      The g4u author is full of himself. Writes a simple little shell script and then gets huffy when the realisation that what he did wasn't that clever hits him. What a fucking ass.

    9. Re:BSD License by Anonymous Coward · · Score: 2, Informative

      In "open source" world you would probably have had N fixes from X different people, each claiming that theirs is the best.

      You need to stop thinking in the low-quality terms that Linux has taught you. The BSDs are actually Open Source _and_ high quality.

    10. Re:BSD License by Anonymous Coward · · Score: 0

      In "open source" world you would probably have had N fixes from X different people, each claiming that theirs is the best.

      And in a business context, it wouldn't matter, because you'd be either buying from a vendor that supplied their own fixes, or you would have your own staff on hand to determine the correct fix.

    11. Re:BSD License by SillyNickName4me · · Score: 1

      This kind of trust relationship is exactly why routers are an interesting target for 'crackers'. They are trusted by especially border routers of other parties, and those happen to be ideal places for mountign man in the middle attacks.

      THe fact that a service is only available to selected peers is in no way a guarantee that you are going to have less trouble with it security wise.

    12. Re:BSD License by Anonymous Coward · · Score: 0

      Or just take the BSD licence right off the code and put on a GPL.

      Like the Linux 2.0.36 kernel's hunk of network code.
      Like the ATA code.
      And the G4U code.
      (or the short lived OpenBSD "clone")

    13. Re:BSD License by Anonymous Coward · · Score: 2, Insightful

      > As opposed to a security hole in a closed-source router... like a Cisco?

      At least Cisco does not change the definition of "security hole" each time one is found on their routers. ;-)

    14. Re:BSD License by Anonymous Coward · · Score: 0
      Lucky for everyone else, a BSD license will make it easy to implement in every other router box and make it cheap
      As opposed to a GPL license, which would make it easy to implement in every other router box and make it cheap.
    15. Re:BSD License by aminorex · · Score: 4, Interesting

      You're responding to the implied criticism of OpenBSD instead of to the more direct and even more absurd criticism of open source in general. Allow me to cut to the chase: OpenZaurus is an amazing success story. Every Zaurus owner I know runs OpenZaurus instead of the Sharp software. The original poster is just a control freak who can't stand that people have the freedom to produce crap as well as gems. That's why Linux comes in commercial distributions: Crap filtering. Buy a nice OpenZaurus distribution if you want it crapfiltered.

      --
      -I like my women like I like my tea: green-
    16. Re:BSD License by ulib · · Score: 2, Insightful
      Your post is very funny (that's why I'm answering to an AC). Now, back to the Land of Reason: the issue of course isn't rocket science, it's copyright infringement.
      Like a comment on this board pointed out, "Hubert's page shows portions of the scripts that are _character for character_ identical between g4u and g4l". And indeed, everybody can judge for themselves: I don't think the illicit ripoff can even be considered a debatable point.

      What's particularly vile is the fact that the "author" of g4l (the ripoff) keeps hiding behind anonimity - ..it's a *very big* AC. :)

    17. Re:BSD License by ulib · · Score: 1
      >GPL people are welcome to import BSD code: actually, they really should do it.
      >Of course, provided they learn to give proper credits.

      I wanted to mod up this post. I can't, so I quoted it. :)


      --
      Being able to read *other people's* source code is a nice thing, not a 'fundamental freedom'.

    18. Re:BSD License by Anonymous Coward · · Score: 0

      Why was this modded down? It's funny - and its sarcasm definitely has a point.

    19. Re:BSD License by Anonymous Coward · · Score: 0
      Why the hell would the g4l author go to the trouble of copying someone elses working code and then intentionally introduce a bug like that?

      .. maybe because he's lame even at *copying* stuff? :-D

      http://www.feyrer.de/g4u/g4l.html

    20. Re:BSD License by k98sven · · Score: 1

      If you want to see a real open source mess, check out Zaurus - just as an example there is a large number of libSDL ports, each different, each having different problems, each compatible with different games, none fully usable.

      How is this a problem with open source? It's a management problem, and those exist in closed-source too.

      Unlike in the closed-source world, you have a chance to do something about it. Merge these ports into something fully usable then. You are free to do it. Don't like how the SDL people are running things? Start your own fork.

      But bitching on slashdot is just stupid.

    21. Re:BSD License by Rick+the+Red · · Score: 2, Interesting
      Um, no, not in "every other router box," only those that are willing to open their code. If Microsoft (to pick on a clearly closed-source company) were to make a router, I'd bet my life they'd never use GPL code in it.

      Well, OK, but I'd bet your life ;-)

      It's much more fun, I must confess, when lives are on the line.
      Not mine of course, but yours old boy, now that would be just fine.
      -- Oogie Boogie, "The Boogie Song"
      Sorry, it's that time of year and I've got NMBC on my mind...
      --
      If all this should have a reason, we would be the last to know.
    22. Re:BSD License by zoso1951 · · Score: 1

      Theories come first. In open source theories are allowed not for a few, but for the many. Use your imagination and see how it can free you from FUD

    23. Re:BSD License by Anonymous Coward · · Score: 1, Informative

      Unless we're talking about buffer overflows and the likes, the amount of trust between BGP peers is fairly limited (at least when things are configured properly).

      Back in the days when I was involved in looking after the peering of an ISP, that trust was limited to the peer announcing some routes, which our router would only use if they were already preconfigured as being expected from that particular peer. Anything else was logged, then discarded by the router.

    24. Re:BSD License by SillyNickName4me · · Score: 1

      > Unless we're talking about buffer overflows and the likes, the amount of trust between BGP peers is fairly limited (at least when things are configured properly).

      That is one possibility indeed, but any bug in handling of input can spell disaster. (format string vulnerabilities to just name another possibility).

      Taking something from the OpenBSD team makes chances on such things pretty small, but not entirely impossible.

      > Back in the days when I was involved in looking after the peering of an ISP, that trust was limited to the peer announcing some routes, which our router would only use if they were already preconfigured as being expected from that particular peer. Anything else was logged, then discarded by the router.

      This is a very sensible policy and I wish everyone would do the same, but it doesn't prevent problems in input validation etc.

      What I said doesn't just apply to BGP, its more something to take into account in general. Establishign a trust relation between 2 machines only enhances security if ou can trust both machines, and even then it should only be used as an additional measure, not as a primary security measure, and can easily result in a false sense of security.

    25. Re:BSD License by Anonymous Coward · · Score: 1, Funny

      While you may be right for some Open Source projects, the OpenBSD team applies sound engineering techniques.

      They sure do!

    26. Re:BSD License by Anonymous Coward · · Score: 0

      +1 witty

  2. Re:dead by mdew · · Score: 1, Funny

    atleast theres some humor shown here by slashdot staff :)

    --
    http://www.fanboy.co.nz/adblock/
  3. Throughput, Expansion Slots, Network Size, Market by Anonymous Coward · · Score: 5, Insightful

    Unfortuantely, even the fanciest boxes running BSD can't complete on a pure throughput basis with good Cisco routers. An twenty-four port gigabit Cisco router has a 48 Gbps backplane, but a PC running BSD will be limited by its bus--the fastest servers have a 64 bit 133 MHz bus with PCI-X. That's 8 Gbps. And you can't put more than a handful of network cards in even the largest BSD-capable server--there simply aren't the expansion slots. So this really couldn't be used for core Internet routers.

    And, of course, you don't need to be running BGP on small networks--it's only when you've got a number of large networks joined together, at a chokepoint, where you need to use BGP to properly route traffic. So there's no point to it for small businesses with who might be trying to save money over a Cisco router--they don't need BRP.

    I wonder, then: where is the market for this....?

  4. nice by zozzi · · Score: 4, Interesting
    I've been to the presentation of this @ Karlsruhe. From the looks of it, it looks really really well designed with a great K.I.S.S. principle all the way. Nice clean separation of userspace/kernel space and a real simple config file. I would give it a shot!

    --
    ---
  5. Zebra by Anonymous Coward · · Score: 1, Interesting

    How does this stack up with Zebra?

    1. Re:Zebra by Anonymous Coward · · Score: 0

      It works, and doesn't flake out and refuse to add routes for no reason.

  6. Doesn't compile on Linux by quigonn · · Score: 3, Informative

    Yesterday, I tried to compile OpenBGPD on Linux. Unfortunately, there is no "portable version" available (unlike OpenSSH), and the source code contains a lot of #includes and library function that are specific to (Open)BSD. That obviously doesn't help portability, and I'm a bit sad that the OpenBSD project doesn't go the portable way and makes its userland as easily compilable on other Unices as possible.

    --
    A monkey is doing the real work for me.
    1. Re:Doesn't compile on Linux by Anonymous Coward · · Score: 4, Funny

      Yeah. Now you Linux users get to feel the pain the BSD users feel for EVERY FUCKING 3RD PARTY PIECE OF SOFTWARE UNDER THE SUN written by Linux weenies.

    2. Re:Doesn't compile on Linux by dmiller · · Score: 4, Informative

      Interfacing with the kernel routing table is highly platform-dependant, there is not avoiding that. Beyond this, if someone wants to make a port, most of the necessary glue can be lifted from OpenSSH's libopenbsd-compat or Darren Tucker's OpenNTPd port - someone just needs to do the work :)

    3. Re:Doesn't compile on Linux by Anonymous Coward · · Score: 0

      Why should it ?

    4. Re:Doesn't compile on Linux by Anonymous Coward · · Score: 5, Informative

      unfortunately the interfacce to the kernel routing table is not standardized, so this is highly platform dependent by the nature of the problem beeing solved.

      Moreover, seeing BGP as a pure userland task ist far off reality. While that is technically speaking mostly true, you need a lot of kernel support. In fact, we did modify our kernel routing table structures to linder kvm pressure and thus fit a full-mesh table (> 140000 enties) into an GENERIC kernel. You need network stack modifications for tcp md5. The ipsec integration required changes to the IPsec kernel implementation as well as isakmpd - and there's more...

      So, while strictly speaking bgpd is a userland thing, you need more than that for a BGP router. OpenBSD and OpenBGPD offer this.

      That said, I am in no way opposed to a portable version. Just like for OpenNTPD I won't do it tho ;) If anybody steps up and makes one, why not?

      henning

    5. Re:Doesn't compile on Linux by quigonn · · Score: 1

      Thanks, Henning, for your insight. If I was in need for a good BGP implementation, I would probably take the challenge and do a port to Linux, but currently, I am not.

      --
      A monkey is doing the real work for me.
    6. Re:Doesn't compile on Linux by agent+dero · · Score: 4, Funny

      What are you talking about?!

      I'm running FreeBSD on the desktop, and I've only had trouble getting the following binaries to compile and run: GTK, Qt, Firefox, Java 1, Java 2, Java 5, gaim, xchat, evolution, mozilla, thunderbird, open office, koffice, gedit....garsh, I don't know what the parent poster is talking about, sheesh

      .....at least xterm works! w00t!

      --
      Error 407 - No creative sig found
    7. Re:Doesn't compile on Linux by ripleymj · · Score: 3, Informative

      Not only the routing table, but I believe OpenBGPd has hooks into pf. Henning mentioned being able to filter and/or queue in the future based on labels assigned to packets in OpenBGPd. You might be able to strip that away for a portable version, but it certainly won't drop nicely into IPTables.

    8. Re:Doesn't compile on Linux by Cargnini · · Score: 2, Insightful

      we don't need Linux 8-), we have {Free,Open,Net}BSD Why someone else will need a Linux ??

    9. Re:Doesn't compile on Linux by Eivind+Eklund · · Score: 5, Insightful
      Disclaimer: I'm a FreeBSD developer, with the bias that brings.

      I think it is a good choice for the OpenBSD cases. It allows development to be done at better development speed and with cleaner code than something trying to be completely portable. This makes it easier to track security and work with the code.

      I'll also note that most software that is "portable" today is written using GNU autotools, which makes it, on average, less portable than software was before autoconf. Either it works at once (this happens reasonable often), or there is a significant amount of pain to make it work. Ten to fifteen years ago, there was usually some work involved, but the average was less, and it was spread out.

      Separating the porting part from the initial clean codebase means that it is possible to debug them separately, and when autotools fails, it is easier to go around them.

      Eivind.

      --
      Doubting the existence of evolution is like doubting the existence of China: It just shows that you're uninformed.
    10. Re:Doesn't compile on Linux by setagllib · · Score: 2, Insightful

      Actually, you're looking at it from the wrong perspective. For one thing, it's a work in progress. For another thing, in the same way the 'pure' OpenBSD OpenSSH was as stripped and system-dependent as possible, this will be maximally secure and hardened. When you add glue to make it stick to other systems, the glue can develop holes in it. That's the harsh fact.

      When this is properly out of the oven, it'll be portable (or rather will have a gluey version) and it will be great. Every project OpenBSD devs undertake is hugely successful and gets integrated into other things very quickly. OpenSSH, PF, and now this will be too. Just you watch :)

      --
      Sam ty sig.
    11. Re:Doesn't compile on Linux by adamGX · · Score: 1

      Check out the xorp project then, xorp includes a version of bgp and compiles on both freebsd, linux and macos.

    12. Re:Doesn't compile on Linux by tepples · · Score: 1

      we have {Free,Open,Net}BSD Why someone else will need a Linux ??

      Linux has drivers for more varied hardware than the BSD kernels have.

    13. Re:Doesn't compile on Linux by Just+Some+Guy · · Score: 1
      While I sympathize, isn't that exaggerating a bit much?

      At home, I have a FreeBSD web/mail/DNS server that I use for personal domains and other lightweight purposes. I also had a Debian desktop that I used on the rare occasion that the wife and kids would let me play with it. Over the weekend, I decided that it made far more sense to consolidate the two than to maintain and power two similar underused computers.

      It would've been a complete nightmare to move all the services over to Debian (since there were a few jail environments involved), so I decided to yank the memory, GeForce graphics, and SB Live! card from the Debian machine to the FreeBSD server and make that into my new combination server/desktop. I did so, then typed "portinstall kde mozilla-firefox jdk14 openoffice-1.1". A while later (Gentoo folks can appreciate this), the resulting system was virtually identical to the desktop I was enjoying under Linux.

      I would not want to manually compile all of those programs and libraries, but I'm more than happy to let a nameless FreeBSD ports maintainer (I have a few myself) do the hard work for me. Installing almost any modern program should be as easy as "portinstall foo" for 99% of users.

      --
      Dewey, what part of this looks like authorities should be involved?
    14. Re:Doesn't compile on Linux by Anonymous Coward · · Score: 0

      This is borderline off-topic, but can you show a relevant piece of hardware supported by Linux and not by the BSDs? Not a niche thing, but something widespread. Heck, even the closed source nvidia drivers have official FreeBSD and DragonFlyBSD releases.

    15. Re:Doesn't compile on Linux by upsidedown_duck · · Score: 1

      Ten to fifteen years ago, there was usually some work involved, but the average was less, and it was spread out.

      Whenever I read the occasional flamewar about the GNU autoconf/automake/libtool suite, some people will claim that portability ten to fifteen years ago was awful and the these tools are a god-send, even though my own experience differs. I still don't understand the modern need for these tools, when a solid POSIX makefile and well-conceived header files are easier to get working on various platforms.

      --
      -- "Makes Little Debbie look like a pile of puke!" - Moe Szyslak
    16. Re:Doesn't compile on Linux by TCM · · Score: 1

      but I'm more than happy to let a nameless FreeBSD ports maintainer (I have a few myself) do the hard work for me

      You think slavery is fun, huh? Which maintainers are you hiding exactly? I will report you!

      --
      Of course it runs NetBSD. BTC: 1NT7QvbetmANwaMzhpVL6
    17. Re:Doesn't compile on Linux by dmiller · · Score: 3, Insightful

      The pf integration is quite self-contained. It could be easily disabled or modifed to work with iptables, though I don't think iptables supports the fast radix-tree table lookups that pf does (maybe there is a module though).

    18. Re:Doesn't compile on Linux by setagllib · · Score: 3, Interesting

      henning = phk? Good work on devfs!

      But yeah, something like this does sound like a kernel task as much as user. But if Linux users now endorse udev, anything can happen. Personally I think it's a terrible idea but that's just me. Thank root Linux devs don't engineer security.

      OpenBSD always seem to work out the Right Way for these things, they haven't failed at a project yet. Don't anybody bring up those flawed scalability benches, who really cares? If you want scalability, you know where to find it. OpenBSD brings practically flawless security and quality where they step, and they have pioneered a lot of development in security that has made modern unices what they are renowned for.

      And yet, I've never run OpenBSD :)

      --
      Sam ty sig.
    19. Re:Doesn't compile on Linux by nicolas.e · · Score: 1

      Pinnacle PCTV. The last time I checked, their bttv drivers had no support for MT2050.

    20. Re:Doesn't compile on Linux by evilviper · · Score: 1
      Linux has drivers for more varied hardware than the BSD kernels have.

      Yes, and you really need your Pinnacle PCTV tuner to run on your BGPd router... Because you get your routing tables from channel 3, right?

      I would say (Free)BSD is beating the tar out of Linux when it comes to network card support, being able to use NDIS drivers, supporting just about every network card on the planet almost immediately, and those drivers just plain being more stable. That's not even mentioning things like network (card) polling, which are really impressive.
      --
      Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
    21. Re:Doesn't compile on Linux by ciph3rBSD · · Score: 1

      No, henning = Henning Brauer (OpenBSD hacker). Good work in bgpd, ntpd, pf, apache privsep... !!! ;)

    22. Re:Doesn't compile on Linux by setagllib · · Score: 1

      Haha well that's just embarassing on my part :)

      Even scarier is the two separate Alan Cox instances, both kernel developers. If root@life loves object-oriented programming He should be more careful with duplication.

      --
      Sam ty sig.
    23. Re:Doesn't compile on Linux by adiposity · · Score: 1

      Yeah, the only reason any of it works at all is because of the patches in ports. Thank god for ports. -Dan

    24. Re:Doesn't compile on Linux by mirabilos · · Score: 1

      OTOH I have made even more PITA efforts and created
      MirLibtool and a framework which replaces all known
      instances of GNU libtool with it, then runs a patched
      GNU autoconf (2.13 or 2.59, according to what the
      package needs) over it, before running configure.

      This is based upon work from the OpenBSD ports tree:
      metaauto - install more than one autoconf at once
      gnu.port.mk - replace config.guess and config.sub
      and control invoking autoconf/autoheader

      And work by myself:
      autoconf - integrate Tom Dickey's patches into
      2.13 and fix 2.13 and 2.59 up enough
      libtool - vandalize 1.5 so it works on both
      autoconf versions

      --
      My Karma isn't excellent, damn it! (And /. still does not get UTF-8 right in 2012. Wow.)
  7. Re:Throughput, Expansion Slots, Network Size, Mark by matthew.thompson · · Score: 5, Insightful

    Just because it's BSD doesn't mean that it's going to be limited to PC Architecture.

    This project could give a boost to manufacturers of competing kit by having a code base that it doesn't have to start from scratch and can be run on a minimal BSD distribution.

    There's nothing to stop A.N.Other manufacturer creating their own arcitecture and running this ontop.

    --
    Matt Thompson - Actuality - Insert product here.
  8. Re:Throughput, Expansion Slots, Network Size, Mark by Anonymous Coward · · Score: 1, Interesting

    - Education
    - Experimentation
    - Small ISPs that cannot afford cisco
    - Competition is good
    - etc. etc.

  9. Re:Throughput, Expansion Slots, Network Size, Mark by dmiller · · Score: 4, Insightful

    Many, many sites use BGP at less that 8Gbps aggregate throughput - hell I know of several sites that still run partial feeds over ISDN BRI. I just don't see where you get the idea that BGP is only for core routers.

  10. Re:Throughput, Expansion Slots, Network Size, Mark by Progman3K · · Score: 4, Insightful

    >I wonder, then: where is the market for this....?

    Perhaps when hackers start using the vulnerabilities in the BGP protocol to attack the Internet and those vulnerabilities are not found to be present or are fixed faster in the open BSD code, that'll justify the project's existence.

    I mean we've already seen that open-source has fewer vulnerabilites than closed-source in general (Think I.I.S. vs Apache), so this will just become another way to secure the Internet.

    --
    I don't know the meaning of the word 'don't' - J
  11. Re:Throughput, Expansion Slots, Network Size, Mark by joelby · · Score: 1

    BGP provides a reasonable way for organisations with backup links to an ISP to manage automatic failover. At ADSL speeds a PC is more than adequate and quite a lot cheaper than a Cisco 1700 series router with ADSL and ISDN WICs.

  12. Re:dead by Anonymous Coward · · Score: 0

    I think some people believe it.

  13. For a broader knowledge see also this by what+about · · Score: 0, Troll

    For all of you that wants a broader view of the routing state of the art you may have a look at Zebra routing engine

    1. Re:For a broader knowledge see also this by Anonymous Coward · · Score: 3, Informative

      Hasn't Zebra been succeeded by Quagga? [quagga.net]

      I ask out of curiosity more than anything else - Debian unstable and testing use Quagga instead of Zebra...

    2. Re:For a broader knowledge see also this by Skinkie · · Score: 3, Interesting

      Too bad that the BGP part of Quagga is actually working well and the OSPF part is dieing like hell. So personally I hope for an OpenOSPF too.
      But since nobody is mentioning it... I thought GateD was a BGP routing thingie too, but I am not sure of that....

      --
      Support Eachother, Copy Dutch Property!
    3. Re:For a broader knowledge see also this by Anonymous Coward · · Score: 0

      There was some work being done on adding multiple default gateways to routes a few months back, that is the first step on the road to getting open shortest path first onto OpenBSD. Try looking into it if you are interested in the idea, you may be able to spot a developer that is working on it and buy them a beer to get them to work harder (or just offer a beer and get a thirsty volunteer).

  14. Re:Throughput, Expansion Slots, Network Size, Mark by chadm1967 · · Score: 0

    "Unfortuantely, even the fanciest boxes running BSD can't complete on a pure throughput basis with good Cisco routers."

    I disagree. It may not run quite as well (very close, though) but the price difference will be astounding!

  15. OpenBSD projects by pchan- · · Score: 5, Informative

    the openbsd team has branched off quite a few projects where they saw the security and/or license was insufficient and needed to be redone.

    OpenSSH, who's box doesn't have this?
    OpenNTPD, a network time protocol daemon and server, recently released.
    OpenBGPD, the border gateway protocol daemon.
    They were pioneers in the use of stack protection software on the i386 platform (kernel and compiler), as well as privilage seperated daemons (it's in your sshd now), and randomized library linking locations.
    (i think i'm missing a few, anyone care to fill them in?)

    they have implemented (a far better implementation over the old one that they didn't write) their i.p. filter, PF (which has now made it into netbsd, freebsd, and hopefully linux soon enough). this includes INSANE amounts of configurability options, with integrated routing and traffic shaping.

    many people grumble about how the project is run and its priorities. but we all benefit from their efforts. i think i'm going to buy a cd even though i am not an openbsd user. these sales help keep these projects going.

    1. Re:OpenBSD projects by arcade · · Score: 2, Interesting

      OpenNTPD, a network time protocol daemon and server, recently released.

      From what I can gather from various NTP mailing lists, this is an SNTP-implementation, not an NTP-implementation. SNTP is just a subset of NTP, and not a fully functional NTP daemon.

      If I'm not entirely mistaken, you're not allowed to join into the pool.ntp.org -pool if you're running OpenNTPD .

      Hope the OpenNTPD developers will address this and make the service fully compliant.

      --
      "Rune Kristian Viken" - http://www.nwo.no - arca
    2. Re:OpenBSD projects by flok · · Score: 0

      Yeah, I'm an arrogant asshole too but that doesn't mean that all I say is bullshit! (really)

      --

      www.vanheusden.com - home of Multitail, HTTPing, CoffeeSaint, EntropyBroker, rsstail, bsod, listener, nagcon, nagi
    3. Re:OpenBSD projects by Anonymous Coward · · Score: 1, Interesting

      > From what I can gather from various NTP
      > mailing lists, this is an SNTP-implementation,
      > not an NTP-implementation.

      This is FUD spread by an idiot who completely fails to understand the protocol and, more importantly, completely misses why the majority of machines these days still have unsynchronized clocks...

    4. Re:OpenBSD projects by Koos · · Score: 1
      Hopefully OpenBGPD is not as flawed as OpenNTP is.
      I think interoperability flaws will have a more direct effect than those in openntp, so acceptance will be affected by any interopability flaws. With openntp (see the excellent stuff written by Brad) it basically boils down to 'your clock looks right, but there are flaws'. If you take an openbgpd router to talk on an internet exchange and it disagrees with other routers on exact bgp details, the effect can easily be 'all traffic' or 'no traffic'. Both of which will not make friends (well, other exchange members may like your offer of free transit, but your beancounters may disagree).
    5. Re:OpenBSD projects by NickHolland · · Score: 2, Informative

      What is your goal?
      If it is to run an app with the maximal buzzword compliance, ok, fine, go run ntp.org's ntpd, and enjoy it. No one is attempting to take it away from you.

      If your goal is to have a clock set within any meaningful accuracies for normal people, openntpd is great. Most computers now are not running any kind of time sync program, and probably wander several seconds (or minutes) a day, assuming they were ever set within a minute or two in the first place.

      WHY IN THE WORLD should OpenNTPD be bloated out to get that last few milliseconds of accuracy? MOST people don't need it. Those that do have long been running (and maintaining) ntp.org's ntpd, and they don't care about openntpd, and that's great.

      If you are running a clock in pool.ntp.org, you better understand all the issues, and probably you really want to go after those last few milliseconds. For 95% of the rest of the world, OpenNTPD is a "activate and forget" tool which will enable them to do things they aren't even trying to do now, simply, safely and securely. How is that bad?

      OpenNTPD is not here to eliminate ntp.org's work, it is here to complement it, and bring it to the masses. The authors do NOT intend for it to become another piece of bloatware.As for whether OpenNTPD is "SNTP" or "NTP"...WHO CARES? IF it works for you, use it. IF it doesn't don't. The world is plenty big for two options here.

    6. Re:OpenBSD projects by drinkypoo · · Score: 1

      From what I understand it does do NTP, but probably not V3 or V4. The reason I removed it is that it doesn't have ntpdate, ntpq, et cetera, so you can't even check on its status, you just have to trust that it's working.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    7. Re:OpenBSD projects by Anonymous Coward · · Score: 0

      Sorry, but you're wrong. OpenBSD was far behind the Linux crowd in implementing nonexec stack - there were patches available for Linux 2.0.
      And well, the concept of running stuff with the least privilege required has been around for as long as setuid() and chroot()...

    8. Re:OpenBSD projects by Anonymous Coward · · Score: 0
      OpenSSH, who's box doesn't have this?

      Ours.
    9. Re:OpenBSD projects by mirabilos · · Score: 1

      While not being such a big thing, the MirOS Project
      has got quite some offsprings as well:

      The MirPorts Framework runs on OpenBSD (and theoretically
      ekkoBSD, if it were life) too:
      http://mirbsd.bsdadvocacy.org/?ports

      The greatly enhanced and secured /bin/ksh has been
      made portable:
      http://wiki.mirbsd.de/MirbsdKsh

      make(1) porting efforts have started:
      http://wiki.mirbsd.de/MirMake

      My improvements to JOE's Own Editor (not strictly
      MirBSD-related and GNU GPLv1 licenced, but hey):
      http://wiki.mirbsd.de/JuppEditor

      hbSuite - SixXS compatible heartbeat client and
      server, in ksh. Can be used for a better DynDNS
      as well as IPv6 tunnels.
      http://mirbsd.bsdadvocacy.org/cvs.cgi/contrib/code /heartbeat/

      cksum(1) - does 3 variants of CRC, MD4, MD5, SHA-1,
      SHA-2 (384, 512), RIPEMD-160 etc.
      no website yet, porting will start soonish

      MirPG - a PGP replacement, not RFC1991/2440 compatible,
      in ksh. Uses X.509 keys, cpio, etc.
      no website yet, design phase has started

      MirOS Linux - a port of the BSD userland to the
      Linux kernel
      AND
      MirOS Interix - can you say MS Services for Unix?
      - well, it's a fun project, but there are hooks,
      and we've settled on a design...

      --
      My Karma isn't excellent, damn it! (And /. still does not get UTF-8 right in 2012. Wow.)
  16. Go OpenBSD! by RAMMS+EIN · · Score: 4, Insightful

    It appears that a lot of good stuff keeps coming out of OpenBSD. They truly focus on the things that matter (for them). Not gadgets or eye candy, but clean, solid, secure network implementations. Kudos again!

    --
    Please correct me if I got my facts wrong.
    1. Re:Go OpenBSD! by Anonymous Coward · · Score: 0

      Yet, the funny thing is very few people actually want to USE OpenBSD. Maybe that's because they are so "focused" on security that it's difficult to use their system as anything other than a basic firewall, or very basic server?

      There are always exceptions of course. But, my personal experience has been nothing but pain with OpenBSD compared to the other BSDs.

    2. Re:Go OpenBSD! by IncohereD · · Score: 1

      Yet, the funny thing is very few people actually want to USE OpenBSD. Maybe that's because they are so "focused" on security that it's difficult to use their system as anything other than a basic firewall, or very basic server?

      Just because I don't want to drive an 18-wheeler, doesn't mean I don't rely on their existence.

    3. Re:Go OpenBSD! by demi · · Score: 1

      I use OpenBSD on a desktop and, in fact, have preferred it there (vs. a server) because of its lack of SMP support (which has changed, though I don't know how good it is yet).

      Also, pf is very powerful and OpenBSD can be used for a much better firewall than "basic." I find pf to be much easier to work correctly than iptables and I feel like I have much easier access to advanced functionally like queueing in OpenBSD.

      I haven't felt any usability pains in using OpenBSD when compared with a (comparable, that is, free as in speech) Linux distribution, say. The install procedure is more basic (and is text-based, of course), but then, I find it harder to screw up as well.

      Except for one thing: for the life of me I can't understand why it has to be so hard to use fdisk/disklabel during install. Absolute offsets and magic slice letters like i in disklabel just kill me. It's really the only thing that's unfriendly in the OpenBSD install sequence.

      --
      demi
  17. Re:Throughput, Expansion Slots, Network Size, Mark by ctr2sprt · · Score: 4, Interesting
    Unfortuantely, even the fanciest boxes running BSD can't complete on a pure throughput basis with good Cisco routers. An twenty-four port gigabit Cisco router has a 48 Gbps backplane, but a PC running BSD will be limited by its bus--the fastest servers have a 64 bit 133 MHz bus with PCI-X. That's 8 Gbps. And you can't put more than a handful of network cards in even the largest BSD-capable server--there simply aren't the expansion slots.
    Most server motherboards support multiple PCI buses. At present there are usually either two or three and only one is 64/133; but in a few years I can easily see that changing as PCI bus speeds double yet again. There are already four-port ethernet NICs out there.

    Right now, you're absolutely right: doing this in a PC would cost as much as or more than a dedicated solution, especially when you factor in the infamous TCO. And as you say later, small networks have no need for this sort of thing. But again, in a few years it may be affordable to do this on commodity hardware. Once the enormous cost of big iron from Cisco et al. comes down, I think a lot of those small networks might just find needs. Especially if we get into the much-touted Internet of the Future where everything has an IP address.

  18. luckily by Anonymous Coward · · Score: 0

    Luckily OpenBSD's work is "open source" and Cisco's is ever increasingly confusing and expensive.

    1. Re:luckily by Lifewish · · Score: 2, Insightful

      And that improves internet speeds for everyone. So we all win. Kudos to the BSD team :)

      --
      For the love of God, please learn to spell "ridiculous"!!!
    2. Re:luckily by J+Isaksson · · Score: 1

      You make it sound like Cisco getting better at BGP would really be a bad thing.
      I for one can sincerely not see the harm.

    3. Re:luckily by Anonymous Coward · · Score: 0

      He is referring to the article, which states that OpenBGPD could become a threat to Cisco.

    4. Re:luckily by acceleriter · · Score: 0

      Heh, a *BSD fan came back from the dead to mod you down. I'm sure there's an overlap between them and the Apple faithful--both stung by legitimate criticism and in denial about an ever dwindling market share.

      --

      CEE5210S The signal SIGHUP was received.

    5. Re:luckily by Anonymous Coward · · Score: 0
      SNIP... both stung by legitimate criticism and in denial about an ever dwindling market share.

      Check installed base, buddy. BSD and Mac OS X (based on FreeBSD) are increasing. State the facts, not your opinion.

    6. Re:luckily by acceleriter · · Score: 1

      Check your math--market share is a percentage. Everyone else has been increasing, too.

      --

      CEE5210S The signal SIGHUP was received.

    7. Re:luckily by ulib · · Score: 1
      Since the FreeBSD market share seems to be the issue (not the user base, that is unquestionably growing fast), these are the most recent facts I could find about it:
      Nearly 2 Million Active Sites running FreeBSD (June 2003)
      "[FreeBSD] is the only other operating system [besides Windows and Linux] that is gaining, rather than losing share of the active sites found by the Web Server Survey."

      And these are the oh so wise things you uttered:

      Heh, a *BSD fan came back from the dead to mod you down. I'm sure there's an overlap between them and the Apple faithful--both stung by legitimate criticism and in denial about an ever dwindling market share.

      It's weird.. it really doesn't look so "dying" to me.
      Why oh why? I can come up with just 2 possible explanations:
      1) I'm biased towards my favourite OS
      or
      2) You're a clueless troll, using the karma bonus to make his bullsh*t resonate louder.

      I really wouldn't know which one to pick... it's really hard. :)

      --
      Being able to read *other people's* source code is a nice thing, not a 'fundamental freedom'.

    8. Re:luckily by acceleriter · · Score: 1

      You're taking this awfully personally. Why not just admit your zealotry and get on with your life? And what's the point of karma if I can't spend it drawing whines from zealots?

      --

      CEE5210S The signal SIGHUP was received.

    9. Re:luckily by Anonymous Coward · · Score: 0

      So Windows and Linux are gaining share, as was said--and BSD gained a little. But it's still not growing as fast, and thus is losing "market share," as if you can believe what OS servers report (it is good security practice to report an OS other than what you actually run).

  19. That's the stupidest argument ever by Gordonjcp · · Score: 4, Insightful
    You *always* hear this when someone mentions using a PC as a router "Oh, PCs are too slow to route multi-gigabyte connections, Cisco are far better".


    Yes, and a Boeing 747 can carry a hell of a lot more passengers than a Citroen CX. Guess which one is most cost-effective and works best for a 40-mile commute?

    1. Re:That's the stupidest argument ever by Anonymous Coward · · Score: 0

      The Boeing ofcourse! Anyday! Only beated by the Concorde which even does parking right into your very room you reserved at your hotel! Beat that with your stupid CX!

    2. Re:That's the stupidest argument ever by Anonymous Coward · · Score: 0

      Yes, and a Boeing 747 can carry a hell of a lot more passengers than a Citroen CX. Guess which one is most cost-effective and works best for a 40-mile commute?

      While I do usually commute to the country club in my Citroen, our staff do so enjoy our weekly jaunts in the 747. It just wouldn't be the same without the spa and the game room.

    3. Re:That's the stupidest argument ever by Anonymous Coward · · Score: 0

      Besides, who wants to drive a car that has to redline in 5th gear to reach 200kph?

    4. Re:That's the stupidest argument ever by setagllib · · Score: 1

      That's pretty bad taste... the concorde tragedies shouldn't be laughed about. They came about entirely because of breakdowns in communication (cheap workers from one country, documentation from another...) and could have easily been avoided.

      --
      Sam ty sig.
    5. Re:That's the stupidest argument ever by rsidd · · Score: 1
      the concorde tragedies shouldn't be laughed about. They came about entirely because of breakdowns in communication (cheap workers from one country, documentation from another...) and could have easily been avoided.

      What are you talking about? The concorde accident (there was only one) came about because of metal shrapnel on the runway, left by a previous plane, that punctured a tyre, pieces of which then ruptured a fuel tank.

    6. Re:That's the stupidest argument ever by danpritts · · Score: 1

      > Guess which one is most cost-effective
      > and works best for a 40-mile commute?

      It's not entirely clear whether both "cost effective" and "best" referred to "40-mile commute," but as it turns out, per passenger mile travelled, 747s hold up quite well in the cost-effectiveness category.

    7. Re:That's the stupidest argument ever by Martin+Blank · · Score: 1

      So where do you park your 747 when at home and when at work? And did your employer pay to have the 6000-foot runway installed, or did you have to come up with that one on your own?

      Being both pedantic and out-of-context at the same time really limits your validity.

      --
      You can never go home again... but I guess you can shop there.
  20. Re:Throughput, Expansion Slots, Network Size, Mark by webbear · · Score: 1

    A handful of these: http://www.intel.com/network/connectivity/products /pro1000mt_quad_server_adapter.htm makes a pretty cool BSD router from any server. Sure the throughput on a Cisco is alot higher, but so is the price, and as others said, there are many sites that need BGP but don't need more than 8 gbps throughput.

  21. Feed the trolls, make them sick by poohsuntzu · · Score: 0, Offtopic

    Sucks? Odd, it has never onced crashed for me in Windows, Linux, or OpenBSD.

    In fact I've even had the following plugins work without hassle nor error: flash, quicktime, realmedia, wmv, mid, and so forth. And unless you are either A.) behind in internet news regarding programs you use or B.) only have an internet connection ever few months, then the plugins created by 3rd parties (such as tab prefernces and all-in-one mouse gestures) won't cause you conflicts.

    It renders CSS1 and CSS2 with a lethal whip of strictness, much like how it handles HTML. Not to mention that if you have -ever- even seen the source code, you will notice how streamlined it is compared to most other browsers on the web. You're blowing hot air and spreading FUD, without research.

    Chances are, you are one of the people who stopped using Windows because "it was buggy", but never took the time to figure out why it was crashing on you and not the people who have had amazing, bug-free experiences with it. Or, you could be the Windows zealot who refuses to use Linux because you won't take the time to learn the interface, and thus choose to whine about how "unfriendly" it is, when in fact it's only different.

    Anonymous Cowards... got to love the spineless bastards in the world.

    --
    "We're breaking out the ramen noodles. . . "
    "Really? Is it someone's birthday?"
    1. Re:Feed the trolls, make them sick by Anonymous Coward · · Score: 0

      Download the chatzilla plugin. Start it. Open preferences... crash.

      Repeatable on OS X. Haven't tried it on anything else.

  22. I feel your pain. Any suggestions... by Lifewish · · Score: 1

    ...on where to find resources that will help me write portable code? What parts of the code is it that FreeBSD would normally have trouble with?

    Incidentally, I think OpenBGPD is a great idea even if it never gets used in real-life situations. It's the principle of the thing really.

    --
    For the love of God, please learn to spell "ridiculous"!!!
    1. Re:I feel your pain. Any suggestions... by Anonymous Coward · · Score: 4, Insightful
      Man pages. Seriously. GNU is good about documenting their extensions, and better yet, they explain why they wrote those extensions. Usually they say things like "SVR4 had a buggy implementation, so we rewrote it to work right." Well, the GNU folks probably aren't the only ones with that idea, so you may find that other OSes have "fixed" the implementation, deviating from the de facto standard. Those are all potential trouble spots, so you should stay away from them if you can.

      Another thing to be mindful of are Linuxisms, like /bin/sh being a link to /bin/bash; and, for that matter, all programs being in either /bin or /usr/bin. Everyone except Linux, more or less, puts stuff in /usr/local or /opt or God knows where else. So when writing scripts, set the interpreter as the actual interpreter: if you're using bashisms in your script, don't set the interpreter as /bin/sh. Don't put in any paths at all to the interpreter, either. Do #!/usr/bin/env bash instead, which will invoke the first bash on the caller's command line. That way you don't have to care if bash is in /bin/bash, /usr/bin/bash, /usr/local/bin/bash, or /opt/bin/bash. Or, in the case of qmail, /var/bash/bin/bash.

    2. Re:I feel your pain. Any suggestions... by Lifewish · · Score: 1

      Thanks, that was a great explanation.

      --
      For the love of God, please learn to spell "ridiculous"!!!
    3. Re:I feel your pain. Any suggestions... by setagllib · · Score: 3, Insightful

      You clearly have great ideas there (this is not sarcasm). You should actually tell people this. I've seen so many Linuxisms it hurts. Seeing the valiant efforts of ports/pkgsrc maintainers in trying to work around these annoying oversights is heart-breaking. Otherwise good (well, not always, but at least irreplacable software like hpoj) software ends up being very hard to get compiled and running without a lot of Makefile and script hacking.

      It's not much better that people say "The X for Linux" (e.g. MPlayer) when it works just as well, sometimes better, on many other platforms, the BSDs being the closest but not only. Tip for devs: just because you wrote it on Linux doesn't mean it's FOR Linux. Linux is not the only platform that benefits from more software being written, and this should be credited. If it'll only work on POSIX-like platforms, "The X for POSIX" may sound less hype-worthy but at least it's accurate. Even so, it's better just to have "Another X" or "Yet Another X" (yacc, anyone?), since this is even more true these days, as most things people want have already been written at least once.

      Open Source should be about sharing between its different platforms, not just with Linux then porting things to other systems as an afterthought. This is disgusting. Think of the quality products other systems have brought (just in this thread, for instance!) that are made properly portable because that's the Right thing to do, not out of sympathy for "those poor X users who don't have our superior layout and system calls" as Linux devs seem to take it very often.

      (When I say 'X' I don't mean X11 or anything, I mean a general wildcard for any system/software name).

      --
      Sam ty sig.
    4. Re:I feel your pain. Any suggestions... by Anonymous Coward · · Score: 0

      "Tip for devs: just because you wrote it on Linux doesn't mean it's FOR Linux. Linux is not the only platform that benefits from more software being written"

      Yes, you are right. How many other unix-like GPL-licensed operative systems do you know? They are the only ones I care of.

      Proprietary Unix? Bullshit.

      BSD unix? All I'm interested about them is to see if I can take advantage of some code, but no interest at all about "doing them a favor". Why do you think I use the GPL for my code?

    5. Re:I feel your pain. Any suggestions... by Anonymous Coward · · Score: 0

      t's not much better that people say "The X for Linux" (e.g. MPlayer)

      MPlayer has changed that slogan.

      Quote from their news page:
      It's "MPlayer - The Movie Player" instead of "MPlayer - The Movie Player for Linux" now.

    6. Re:I feel your pain. Any suggestions... by setagllib · · Score: 1

      Ack. See, when you use automated package installation (ports/pkgsrc/portage,etc) you don't notice these things :)

      Thanks for the tipoff, and kudos to MPlayer devs. I love the software and now I can love the politics.

      --
      Sam ty sig.
    7. Re:I feel your pain. Any suggestions... by setagllib · · Score: 1

      Why do things have to be GPL? Just because it makes it impossible for corporations to borrow from them, and makes embedded work messier? I respect RMS' ideas and all, but the GPL is just as encumbered as proprietary licenses, certainly as long and complicated. It just happens to demand that the product have source included with binaries, and that further generations of the software must also be GPL. They call it the "GNU Public Software Virus" in some camps, since it ends up 'infecting' a lot of otherwise unencumbered software.

      I bet I could save ~10 meg all up if every instance of the GPL in software on my disk (that measurement includes bzip2's effects) was relicensed to BSD or even free domain.

      --
      Sam ty sig.
    8. Re:I feel your pain. Any suggestions... by demi · · Score: 1

      Agreed. I almost didn't buy my iRiver 790T because the excellent free driver said it was "for Linux." Instead, I investigated a little more, compiled it for my OpenBSD system, and went out and grabbed a great flash player (plays Oggs--woot!).

      A situation which causes similar pain is when people write non-free software for Linux/x86. I've mostly lived in the "totally free" world (by necessity) because I use Linux on PPC and OpenBSD. And believe me, you start to bemoan the ignorance of folks who are pleased when software is available "for Linux" but don't understand what freedom is supposed to be about.

      [A note: writing portable free software isn't that hard. I've written software at work that I know is intended for a single machine running Linux, but I usually keep it running on a BSD and Solaris too, just to keep it portable. It's a habit I'd like to see more widely adopted.]

      --
      demi
  23. Re:Throughput, Expansion Slots, Network Size, Mark by Anonymous Coward · · Score: 0

    Unless I'm hugely mistaken, Juniper started their (very successful) line of routers on what beared only little difference with a beefed up PC.

    If you find a market for a BGP capable router cheaper than the ones sold by Cisco, you can probably afford to spend some time designing an architecture which will accomodate a lot of traffic.

  24. BSD dying ??? by Cargnini · · Score: 0

    How BSD is DYING ???? *BSD are releasing BGP !!!! Firewalls, Servers, the majority web servers on world are runnig BSD How dying ?!?!?!?!?!?!

    1. Re:BSD dying ??? by AKnightCowboy · · Score: 1

      What the hell? Do you moderators even READ the posts? The guy was asking why the Slashdot story was saying BSD was dying. Lighten up Francis.

  25. Re:Throughput, Expansion Slots, Network Size, Mark by silas_moeckel · · Score: 3, Interesting

    I agree with you on throughput limitations. But lets look at some facts. The second biggest router company manages there rotuers with a BSD kernel (Juniper) and runs the routing bits in that kernel (with hooks to move everything into hardware once the desision is made) PC's make good general purpose routing procs they make poor packet shufflers if you take a felable platform with a lot of headroom you can make a great administrative box and if it's coupled with a good hardware asic to push packets it can scale.

    Now small networks need BGP as well. It's the best way to have multiple redundant links to providers while running servers beyond mail. I have a small pile of clients some as small as a couple T1's running BGP between two providers.

    --
    No sir I dont like it.
  26. care to elaborate? by hummassa · · Score: 1

    even send in some links, so I can lazily NOT google for them... :-) please?

    --
    It's better to be the foot on the boot than the face on the pavement. ~~ tkx Kadin2048
    1. Re:care to elaborate? by NickHolland · · Score: 2, Interesting

      Most probably, this:
      http://bradknowles.typepad.com/considered_harmful/ 2004/09/openntpd.html

      And yes, I consider it nonsense, but rather than name calling, I'll happily share it and let you decide how not matching every feature of another program is "harmful". If you agree, don't run OpenNTPD. That simple.

    2. Re:care to elaborate? by NickHolland · · Score: 2, Informative

      oops, I didn't answer the other part about pool.ntp.org:
      http://www.pool.ntp.org/#news
      see the "2004-09-07" entry.

    3. Re:care to elaborate? by Tuck · · Score: 3, Insightful
      When you're reading it, please note that the stratum and refid (the comment about ntptrace) things have been fixed in (in OpenBSD -current or portable snapshot).

      Also I think the criticism about portability is not warranted. At the time that article was written OpenNTPD already supported Solaris (it was the 2nd target I did) and HP-UX support has since been added. I don't think it's valid to criticise a project that's only existed for a couple of months for "only" running on Linuxes, 4 *BSD's including OSX, and Solaris which covers the 3 main *nix families in use today (Linux, BSD, SysV). The split between OpenBSD and Portable is quite clean and the differences in the common code are small (~50 lines, the diff is in the Portable tarball).

      The comment about clock disciplining is a fair point. Right now OpenBSD doesn't permit changing of tickadj at the default securelevel so another mechanism is needed in the kernel. In the mean time I've been experimenting with clock disciplining via Linux's adjtimex syscall (implemented with *zero* changes to the common code).

      The comment about crypto depends on what your threat profile is. Relying on large crypto libraries means that you're less vulnerable to active attacks of the "make your clock wrong" type, possibly at the expense of being more vulnerable to attacks of the "0wnd ur b0x" type. Admittedly, in some cases (time sensitive authentications like Kerberos) the former may lead to the latter, but in many cases it can't.

      Anyway, decide for yourself. You now have another option (which is why I embarked on -Portable in the first place).

      --
      $ find /pub -beer "James Squire Amber Ale" -drink
  27. Re:Throughput, Expansion Slots, Network Size, Mark by SorcererX · · Score: 2, Informative

    there's always 8x PCI-E for transfering lots of data. That'd give you 20 Gbit in each direction. 16x PCI-E NICs and even 32x PCI-E NICs should be available in a not so distant future.

    --
    Any sufficiently advanced technology is indistinguishable from magic.
  28. Re:"BSD is dyning" by setagllib · · Score: 4, Interesting

    Pretty much. It's the same there too. Everyone wants their project to do better.

    The truth is, Linux and BSD are meant to coexist, but not for the same purposes. BSDs are meant as code bases that serve purposes really very well, cleanly and with dedication. They won't just accept "any patch that compiles" as has happened in Linux a lot. They're mostly there for the developers' ideas and needs, and usually users end up with the same needs.

    On the other hand, Linux is meant to be the kernel for everyone, and this seems to be the case. It runs on just about everything (even if not in the mainline kernel) and it runs pretty well for the most part. The code base is not clean, but it is functional, which is what matters scientifically. It gets contribution from unspeakable numbers of developers and research and this shows - it has something it does much better than every other system (but yes, every other system has at least one thing it does much better than Linux).

    Right now I run NetBSD because I wanted production machines I could stake my life on (still living). I use Linux on my laptop mostly because it has an NVidia card for which NetBSD drivers don't exist (or at least aren't easily downloadable :)). I like Linux, it performs really well. But I don't like that it's pretty dirty and hackish, which is certainly enough to put me off it. I get the same technical advantages with NetBSD but cleaner and with less maintainance (Good Thing).

    Matter of opinion though. These things change. Hell I dropped FreeBSD (see tag) after a long time of worshipping it, just because 5.3 has too many regressions to appeal to me.

    --
    Sam ty sig.
  29. Jokes by ulib · · Score: 1, Offtopic
    I know the slashdot staff made a joke, but since sometimes these are not obvious to everybody (among the comments there's even an AC seriously talking about BSD "declining"), it could be useful to quickly review the facts:
    FreeBSD, Stealth-Growth Open Source Project
    Nearly 2.5 Million Active Sites running FreeBSD
    "FreeBSD has dramatically increased its market penetration over the last year."

    I picked the articles about FreeBSD because it's the BSD "mainstream" version, and now I'm talking about popularity. Of course this means nothing about the quality (let's remember that Windows is the "mainstream" OS... ;). In fact, NetBSD and OpenBSD are usually considered on the same level of excellence.

    --
    Being able to read *other people's* source code is a nice thing, not a 'fundamental freedom'.

    1. Re:Jokes by Anonymous Coward · · Score: 0

      Yeah, it's amazing how oblivious some people are to sarcasm. If an article touting on-going improvements to BSD end with a statement, "luckily for Cisco, *BSD is dying. . ." it should be quite obvious they are taking a jab either at some Cisco FUD, or some article that was previously released about the supposed demise of BSD lol. But, alas, some people have no sense of humour I guess.

    2. Re:Jokes by Anonymous Coward · · Score: 0

      It's not a matter of being oblivious to sarcasm, it's a matter of being uninformed.
      To people knowing facts it's obviously a kind of joke, but a poorly informed person could have misunderstood it quite easily - exactly as it happened in some comments above.

  30. Cisco routers use PCI bus by puzzled · · Score: 4, Informative



    The Cisco 3600 series *does* use PCI for its bus. Those two or four or six slots on a 36xx series are good ol' PCI, they're just in a Cisco form factor, not the Wintel PCI form factor you're used to seeing. I do believe this means every NM form factor slot is a PCI - 26xx, 28xx, 36xx, 37xx, 38xx, and some other stuff all use it.

    Cisco uses PCI because its a fast, competent bus, with lots of inexpensive parts due to PC volume driving chipset costs. They get more out of an 80MHz MIPS processor in a 3620 than you get out of a 1GHz Athlon because the hardware is tuned to do nothing but move packets from point A to point B.

    --
    I am very easy to get along with, but I don't have time to waste being nice to people who are being stupid. -Theo
    1. Re:Cisco routers use PCI bus by arivanov · · Score: 1

      1. It is PCI, but the modules do not use the standard PCI pinout and are not standard as per any of the available PCI standards (normal, mini or compact). You are correct - they use classic PCI chips. Early 36xx ethernet network modules used AMD lance, more recent ones use Intel.

      2. 72xxx is also PCI, once again with a different card form factor.

      3. The performance has nothing to do with tuning. It has to do with offloading heavily to cards various functions like checksumming and a lot of layer2 work.

      --
      Baker's Law: Misery no longer loves company. Nowadays it insists on it
      http://www.sigsegv.cx/
    2. Re:Cisco routers use PCI bus by bani · · Score: 2, Insightful

      are you sure?

      a 1ghz athlon can forward >150k 64byte packets/sec. an opteron can do >550k/sec. this is commodity pc hardware, cheap and easy to come by.

      i am quite certain a 3620 cannot do that.

      also, if a part in your 3620 dies (power supply, etc) you are totally screwed unless you have a spare on-hand.

      inexpensive parts huh. thats why an intel gigabit pci card costs $50 while a cisco NM-1FE-TX costs $1100? is the cisco card really 22 times better than the intel card?

      not to mention you're fucked if cisco EOLs the hardware.

    3. Re:Cisco routers use PCI bus by puzzled · · Score: 1



      Cisco EOL is not an issue.

      http://www.optimumdata.com
      http://www.nhri.com
      http://www.whirled-routers.com
      http://www.quadra source.com

      and on and on and on and on ...

      and

      http://ebay.com

      --
      I am very easy to get along with, but I don't have time to waste being nice to people who are being stupid. -Theo
    4. Re:Cisco routers use PCI bus by bani · · Score: 1

      Thats all very nice. Gee, I would never have thought of looking on ebay. Pure genius. Really.

      However EOL most certainly is an issue if a new sploit or bug is discovered. IOS for EOL'd ciscos wont be updated. This is already an issue for many Cisco models. You are well and truly fucked if you are stuck with one. Only option -- upgrade to a newer model. Suddenly, Cisco isnt so cost effective anymore.

      nhri.com? quadrasource.com? you're quite sure about those URLs, are you?

    5. Re:Cisco routers use PCI bus by peacefinder · · Score: 1

      He meant "inexpensive for Cisco", not "inexpensive for you". Markups, ya know.

      --
      With reasonable men I will reason; with humane men I will plead; but to tyrants I will give no quarter. -- William Lloyd
    6. Re:Cisco routers use PCI bus by setagllib · · Score: 1

      Hey easy there, we get the idea :)

      PCs with free software are worlds of freedom. Embedded or otherwise 'specialty' hardware usually has less freedom and costs a ton more. Personally I don't want a router even though they're cheap and effective, because I like having complete control over my gateway (and being able to use it as an emergency internet client :))

      But I think you're exaggerating the 'danger' of CISCO kits. Are they really going to tell you to go f*ck yourself if you ask for part replacement or something? I'm curious because I don't know their policies, but it still sounds like something nobody would buy if it was that bad.

      --
      Sam ty sig.
    7. Re:Cisco routers use PCI bus by bani · · Score: 1

      cisco will tell you to go fuck yourself if they find non-cisco branded ram in your router. of course that cisco ram costs around $900 for 256mb... and it's just retail kingston or crucial dimms or whatever with a cisco label slapped on it.

    8. Re:Cisco routers use PCI bus by setagllib · · Score: 1

      Okay, that's pretty fscking bad. I just assumed they had some decency. Imagine my surprise :)

      --
      Sam ty sig.
  31. Re:And no children need respond ... by puzzled · · Score: 1



    I misspoke and I apologize. I said 'child' when I meant 'querulous binary Linux distribution fanboy'.

    BSD might be dying, but not in this century, and it's kernel will be a much prettier corpse than anything to come out of kernel.org

    --
    I am very easy to get along with, but I don't have time to waste being nice to people who are being stupid. -Theo
  32. Re:Throughput, Expansion Slots, Network Size, Mark by Anonymous Coward · · Score: 2, Informative

    Actually, if you look at the architecture of a Juniper Networks router, it is based on FreeBSD. The Routing Engine is a merely a normal PC motherboard running the Free BSD kernel and Juniper code to handle the routing protocols and system management. There are custom-built ASICs in the Packet Forwarding Engines that handle the packet processing. This architecture has proven to easily out perform the old monolithic architecture of Cisco.

    Yes, a higher-end Cisco probably out performs my laptop running OpenBSD and OpenBGPD, but my laptop wasn't designed to be a high-end router.

  33. Re:BDS by shis-ka-bob · · Score: 1
    Who cares about BDS, I want to see how many more will start to use BSD. (sorry, it was cheap shot, but you ought to be able to spell a TLA.) If you count OS/X as a BSD, BSD is widely on desktops. It is also widely used as a server platform, even by Microsoft's Hot Mail. All three (Free/Net/Open) of the BSDs have been used in embedded systems (e.g. http://www.netbsd.org/Misc/embed.html)

    I'm guessing that the combination of OpenBGPD, OpenVPN, OpenSSH and Asterisk (running on BSD) are going to be a real challenge for Cisco, at least in the home and small to medium business markets. Don't forget that this is the very same team that brough us OpenSSH, which is now so widely used as to be ubiquitous. The convergence of wireless, broadband and VOIP need a flexible router/firewall appliance. Especially now that chip makers (VIA and whatever Motorola is calling its chip division ) are adding RNGs and 'on chip gigabit/sec ethernet' (respectively), it seems like you can build a formidable router with the form factor and power consumption of your typical Linksys home router. For this market, BSD is a natural choice for any manufacture with cold feet about basing a product on GPLed software.

    --
    Think global, act loco
  34. Why not work on a current project, I dont get it by mnmn · · Score: 1, Troll

    Zebra and Quagga already exist. They are supposed to provide BGP among other protocols. I just dont get why they dont join those projects to improve them rather than fork out a new one.

    Improving the architecture of say Quagga will be more beneficial and probably welcome than forking out your own. It would also keep the code portable while supporting rip, ospf isis etc. I'd love to see a secure version of Quagga for OpenBSD, sounds much better than an all OpenBSD suite.

    --
    "Give orange me give eat orange me eat orange give me eat orange give me you." -Nim Chimpsky
  35. Re:Throughput, Expansion Slots, Network Size, Mark by Gadzinka · · Score: 4, Interesting

    So this really couldn't be used for core Internet routers.

    Well, I believe that core Internet routers are about 1% of global router market, the rest of them rarely sees more than 100Mbit combined throughput on all WAN ports.

    So, several good managed switches and couple of redundant routers on OpenBGPD would serve well over 90% of the market.

    Robert

    --
    Bastard Operator From 193.219.28.162
  36. BGP on BSD is more useful for IP Anycast by gaurab · · Score: 1

    For those who think that BGP is useful just on routers have some catching up to do. When doing IP anycast, it is essential to have some kind of dynamic routing protocol working on the anycast hosts. The host constantly need to communicate their reachability to the router facing the rest of the world. If the host goes down when there's a satic route, the traffic is null routed.

    Thus the resurgence in development of quagga after forking it from zebra. OpenBGPd, i am sure will have more IP anycast nodes running it then someone running it as pure edge routers.

    One of the most important reason for BGP to work on host based system i

  37. Re:Throughput, Expansion Slots, Network Size, Mark by arivanov · · Score: 3, Informative
    The only justification for the project existence are exchange points and load balancing. The reason is that neither of these requires any IGP.

    BGP by itself is meaningless. You need at least OSPF for a small network and ISIS for a large one to be able to use it and you need them in a form where the BGP knows everything about an OSPF or ISIS route.

    --
    Baker's Law: Misery no longer loves company. Nowadays it insists on it
    http://www.sigsegv.cx/
  38. 8gbits is quite a lot by Anonymous Coward · · Score: 1, Interesting

    It wasn't that long ago that you would have to spend $100,000 to get a SWITCH (not a router, just a switch) that could sustain a gigabit of traffic. Now you can do it for a couple thousand on generic PC hardware. Not bad if you ask me. Outside of academia and large corporate networks, there aren't many folks pushing 8gigabits of traffic around anyway so I don't see that as a limiting factor for many individuals and small-mid sized companies.

    Cheers,

  39. Reports of Cisco's Death... by bill_mcgonigle · · Score: 2, Interesting

    Lucky for Cisco, BSD is dying...

    I case you really are stuck in 1987, Cisco does a couple more things than routing these days.

    Why just a few weeks ago, I setup a multi-site network using Cisco switches and multiple VLAN's and I typed in the appropriate commands (yes, cryptic until you bother to learn) and it worked. No fuss, no troubleshooting, free documentation - this is why people buy Cisco..

    Yes, they're market-dominant, yes, they're expensive (hint: buy refurb) and yes, they're into certifications and the like, but that doesn't make them Microsoft. Imagine if Microsoft made rock-solid products and wasn't always trying to screw the rest of the world.

    Now, start setting up VOIP networks, dynamic VLAN's and fully-meshed WAN networks, stuff a dozen or more pieces in a rack, and you'll start to see that a PC with a FOSS OS isn't always the right answer.

    --
    My God, it's Full of Source!
    OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
    1. Re:Reports of Cisco's Death... by Anonymous Coward · · Score: 0

      our university's campus bought cisco products for a good price as a system wide discount. at least 80% of them had to be returned because of bad logic boards or failed power supplies. i dont have that much confidence in cisco.

    2. Re:Reports of Cisco's Death... by Anonymous Coward · · Score: 0

      They have shitty hardware, that is horribly underpowered, and not reliable at all. Their software is full of security problems. They are expensive. An openbsd machine will easily do a better job than a cisco in 90% of the cases. In those other 10%, a Juniper will do a better job than a cisco. In all cases, you are saving yourself money, and getting a better solution. Cisco is never good, for anything.

    3. Re:Reports of Cisco's Death... by Anonymous Coward · · Score: 0

      Look up the stories concerning OpenBSD and vrrp. The OpenBSD team ended up writing their own replacement for vrrp because of the Cisco encumbered patents on vrrp.

    4. Re:Reports of Cisco's Death... by The+Cisco+Kid · · Score: 1

      Cisco IOS, and its single config file, absolutely rocks. I was just looking at the man page for the config file for this project, and it stuck me as absurd that they didnt use the same syntax.

      What I would love would be an IOS or IOS clone that ran on common x86 hardware, becuase, as you note, Cisco HW is expensive, even if you do buy used/refurb.

    5. Re:Reports of Cisco's Death... by Anonymous Coward · · Score: 0

      Yeah, they do a couple more things, usually poorly.

      I'm glad you had a success story with them; I deal with cisco gear constantly. Why, just today I was at one of our remote jobsites replacing a netopia DSL modem with a cisco 837 to do a device level vpn tunnel back to a cisco 3020 concentrator. Despite having a working setup in my lab; when I got on site I couldn't even get (two) 837's to pass IP traffic, let alone ipsec. From the IOS CLI (and the commands aren't cryptic, they're retarded - the notion of writing the netmask BACKWARDS relative to every other vendor on the planet is evidence of this; it's like MS using the term 'domain' but not meaning DNS, well until later [2k+ domains] Embrace, extended into retardedness and beat on the dumb ape chest of market dominance, without quality), from the web SDM, using the wizard, etc - jack! ATM circuit up great, IP nein.

      The netopia is doing just hunky dorey though, for now.

      It would be one thing if this sort of BS happened once in a blue moon, or I were a complete moron (I'm only just a partial moron) but Cisco gear is constantly a nightmare to deal with, catalyst 6509, 2600 routers, 3600 & 7120 series too - all overpriced SHIT IMO that I deal with on a daily basis. And for the cost of yearly maintenance on them, I could be buying equivalent gear (well, that's not true, it's probably better) from competitors, each year!

      Go clutch onto your precious little CCIE, and take your bassakwards rhetoric to a JOKE comment ("BSD is dying") elsewhere in a place where you can self defend (self-DoS) yourself endlessly.

    6. Re:Reports of Cisco's Death... by evilviper · · Score: 1
      Cisco IOS, and its single config file, absolutely rocks.

      I've heard this from a few people, and it absolutely amazes me. I don't know how anyone can possibly like it.

      It may technically be one file, but it's got completely different syntax from section to section. It's a complete mess to edit directly, other than just changing a number here and there.

      *.conf files are so much better. They have consistent syntax, can span multiple files (flexibility), can be edited quite easily, etc.

      Please explain what's so good about it.
      --
      Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
    7. Re:Reports of Cisco's Death... by The+Cisco+Kid · · Score: 1

      1. Once you know how to do something, its almost impossible to forget

      2. tab-completion in both command-mode and config mode - you dont 'edit' the file, you type the config commands, which are saved as part of the running config. Unless you are copying the entire config, you dont do the whole download/edit/upload - you modify the configuration directly at the cisco CLI. You cant 'forget' to save part of the config, as 'copy run star' (copy running-config startup-config) will copy *every* thing from the currently effective configuration, to the NVRAM 'saved' copy.

      3. If you *do* need to copy an entire configuration, between identical (or similar) devices, you copy/paste the entire thing, and bang, you are done.

    8. Re:Reports of Cisco's Death... by evilviper · · Score: 1

      1. I don't know how this applies to anything.

      2. You've proven my point. If you aren't editing it directly, it could just as well be 20 different config files behind the scenes, and you wouldn't know the difference.

      3. And in that rare case, it saves you a second or two. In other situations, where you might only want to copy one section (eg. the ACLs) it wastes plenty of time.

      --
      Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
    9. Re:Reports of Cisco's Death... by The+Cisco+Kid · · Score: 1

      1. It points out that its easy to learn to use.

      2. Actually, I dont care so much about the backend storage of it, so much as it is *represented* as 'one file', or 'one stream of ASCII'.

      3. If you want to copy just part, then copy(/paste) just part - trivial. The point is, if you need to swap to a hot spare, or duplicate a standard site config to a new device for a new site, instead of having to wade through multiple menus, and compare the default settings in the new device with the ones in the standard config, and change the right ones, switch to the next menu, blah (eg 3com ascend etc), instead you have *ONE* 'stream of ascii' to copy, and you are done.

  40. Re:Why not work on a current project, I dont get i by ArbitraryConstant · · Score: 2, Informative

    The OpenBSD crowd often don't play well with others. They have a completely different set of priorities than other projects.

    There was a discussion on the misc@ list, and it basically came down to completely different priorities plus lots of OpenBSD specific hooks.

    --
    I rarely criticize things I don't care about.
  41. Re:Why not work on a current project, I dont get i by Anonymous Coward · · Score: 0

    Zebra/Quagga are fundamentally flawed, so badly that you cannot fix them without a complete rewrite.

    besides that, I could have only worked in 30 minutes chunks on that codebase, due to the breaks needed to go puking.

  42. Re:Throughput, Expansion Slots, Network Size, Mark by ingvar · · Score: 2, Informative

    As long as you have enough of an IGP cloud so the BGP peer IPs are visible to all BGP peers, you can run BGP for (most) of your routing (and just duplicate the peering IPs between IGP-of-choice and iBGP).

    Not that it's *necessarily* a good idea, mind you. But it does make *some* things way easier.

  43. Re:Throughput, Expansion Slots, Network Size, Mark by kc5deb · · Score: 2, Informative

    Aparantly you've never heard of Juniper Networks. They're router solutions beat the pants off of Cisco for throughput and price, and, they're running FreeBSD on their routers.

  44. Re:Throughput, Expansion Slots, Network Size, Mark by MarkKnopfler · · Score: 1, Interesting

    I would disagree with you on that one. I have worked on a project where we used a x86 board running the configuration plane for a router/switch and used Intel Based Network Processosr for the data path/switching function. Yeah it had the works -- Throughput, Expansion slots.
    Now the catch is that we were running our tweaked version of NetBSD on the x86 control plane, which was running the routing daemons. So if there is a BSD licenced BGP out there, it is possible to deploy it on the above mentioned box.
    So my point is that we actually have rather fancy boxes out there running *BSD.

  45. Re:Throughput, Expansion Slots, Network Size, Mark by Anonymous Coward · · Score: 2, Interesting

    You don't know much about BGP and its real world uses, don't you? First of all, there are a lot of relatively simple, relatively slow WANs using BGP both internally and on their borders. For example, just being dual-homed the right way (TM) with 2 ISPs for resiliency, even with slow T1 links, means that you're doing BGP. Second, even in ISPs and large companies you could have lots of situations where you could appreciate having a cheap, flexible PC doing BGP. Route reflectors, non-core routers (relatively slow customers/PoPs/remote offices), routers injecting BGP-learned routes into OSPF or other internal protocols (and vice-versa), etc.

  46. How about the 6500 series? by slashhax0r · · Score: 0

    What about the 6500 series, alot of cisco hardware is PC based (PIX 525)? but.. look at a big expensive 6509, arent they something like 256gb on the backplane?

    1. Re:How about the 6500 series? by puzzled · · Score: 1



      The 6500 has a 32 gig backplane and each slot is 32 gig. You used to add a switch fabric module to turn the backblane into a nonblocking crossbar switch with 256 gig of capacity. I think they now integrate that crossbar stuff in the newer engines, but its been a while since I touched one.

      Yes, the PIX series is Wintel based. The older ones actually had an ATX mainboard you could upgrade, or you could convert the whole thing to a rackmount PC if you didn't mind drilling a keyboard hole in the case.

      --
      I am very easy to get along with, but I don't have time to waste being nice to people who are being stupid. -Theo
  47. Re:Throughput, Expansion Slots, Network Size, Mark by PDXRedcat · · Score: 4, Informative
    Unfortuantely, even the fanciest boxes running BSD can't complete on a pure throughput basis with good Cisco routers. An twenty-four port gigabit Cisco router has a 48 Gbps backplane, but a PC running BSD will be limited by its bus--the fastest servers have a 64 bit 133 MHz bus with PCI-X. That's 8 Gbps. And you can't put more than a handful of network cards in even the largest BSD-capable server--there simply aren't the expansion slots. So this really couldn't be used for core Internet routers.
    I think you may be confusing switches with routers. Cisco has some nice switches like the 3550-48. These switches contain basic routing capabilities. The Cisco switches work well with BSD routers, and OpenBGPD fits in here. If you are talking about Cisco 10000, and 12000 models, then it's a totally different ballgame. These things when fully loaded cost more than most houses. They're generally limited to full-on service providers, not medium sized businesses with 500 employees.
  48. No more Intel by Santana · · Score: 2, Informative

    FYI, buying from Intel is discouraged

    --
    The best way to predict the future is to invent it
    1. Re:No more Intel by 0racle · · Score: 1

      Not like Theo can do anything about it. I might like his input on OS and security related matters, but personally I don't care what he thinks I should or shouldn't buy. If its a solution to a problem you have, buy it, if not, don't, but don't let other peoples beliefs about what should and should not happen as regards how open things are. Its a free OS, the user is the one with the freedom to choose how and where to run it.

      --
      "I use a Mac because I'm just better than you are."
    2. Re:No more Intel by evilviper · · Score: 1
      personally I don't care what he thinks I should or shouldn't buy.

      It's not based upon opinion, it based upon them not giving free access to things like firmware, which are necessary to operate the hardware.

      Its a free OS, the user is the one with the freedom to choose

      Yes, and you are free to walk across picket lines too. You are free to buy from companies that run sweatshops. You are free to do many things, but that doesn't mean you should.

      You're giving this guy an awful lot of crap, when the only thing he said was that Intel is not "recomended". Nobody said you'll be stabbed in the face for buying from Intel. Your reaction is completely insane.
      --
      Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
    3. Re:No more Intel by Anonymous Coward · · Score: 0

      The recommendation of not using Intel gear is for wireless NICs. We still encourage the use of Intel Ethernet NICs, both 100 Mbps (fxp) and Gigabit (em). These are very good and well supported NICs.

  49. Re:Throughput, Expansion Slots, Network Size, Mark by epine · · Score: 1


    How about a 32 lane PCI-E implementation with no lames or blinks devoted to Doom III? 40Gbps backplane, bidirectional.

    http://arstechnica.com/articles/paedia/hardware/ pc ie.ars/5

    PCIe's bandwidth gains over PCI are considerable. A single lane is capable of transmitting 2.5Gbps in each direction, simultaneously.


  50. Re:Throughput, Expansion Slots, Network Size, Mark by drinkypoo · · Score: 2, Interesting

    PCI will go away soon enough in PC-land. We'll be moving on to PCI-Express. You get to pick your bandwidth and it gets a lot faster than PCI in the top end. I figure Cisco will be moving to PCI-Express as well, to take advantage of preexisting designs.

    --
    "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  51. Re:Throughput, Expansion Slots, Network Size, Mark by arivanov · · Score: 1

    Been there, done that as a result of not knowing how to configure IGP on a unix box 10 years ago with gated. No thanks.

    In btw, exchange points and load balancing are still more then enough to make a living off. And hopefully someone will at get an OSPF daemon working or get a good API to use this BGP daemon with a foreign OSPF implementation which lacks in terms of BGP.

    --
    Baker's Law: Misery no longer loves company. Nowadays it insists on it
    http://www.sigsegv.cx/
  52. Re:Throughput, Expansion Slots, Network Size, Mark by Anonymous Coward · · Score: 1, Interesting

    I guess you've never heard of Juniper Networks (http://www.juniper.net) . The routing and management engine all run in FreeBSD on an x86 platform, while the actual forwarding of the packets is done by their ASICs. It kicks the crap out of any piece of cisco gear out there for speed, high availability, and maintainability. Your bgp process dies? Simply restart it! Can't do that on a cisco, I guarantee it!

  53. Re:Throughput, Expansion Slots, Network Size, Mark by misleb · · Score: 1

    It is good for small ISPs who don't have a lot of peers. It obviously isn't meant for high bandwidth core inernet routers. Also, OpenBGPD might be good for businesses that need to manage multiple internet connections to different ISPs. BGP is the only way to go if you actually want to have real connectivity redundancy. It isn't uncommon.

    -matthew

    --
    "THERE IS NO JUSTICE, THERE IS ONLY ME." -Death
  54. Microsoft soon to follow! by Guppy06 · · Score: 1

    "an BSD-licensed implementation of the Border Gateway Protocol, BGP"

    So I guess this now means Longhorn will support BGP.

  55. Re:Throughput, Expansion Slots, Network Size, Mark by Morrigu · · Score: 1

    "There are already four-port ethernet NICs out there."

    'man qe' and 'man qec' on a [Net|Open]BSD box gives you some details, but for years, Sun QuadEthernet and QuadFastEthernet cards have been a solid option for multi-port ethernet connectivity on SPARC and UltraSPARC boxes.

    And heck, if this means my little 50Mhz SPARCclassic box can do BGP routing, that's great!

    --
    "We can categorically state that we have not released man-eating badgers into the area." - Major Mike Shearer, UK
  56. Re:Throughput, Expansion Slots, Network Size, Mark by Anonymous Coward · · Score: 0

    BGP is often used when multihoming. Hell, I have a full BGP feed to my home network.

  57. Hopefully. by ulib · · Score: 1
    >So I guess this now means Longhorn will support BGP.

    Short answer: hopefully.
    Longer answers: here and here
    (..i'm starting to think that a bot could come in handy ;)
    --
    Being able to read *other people's* source code is a nice thing, not a 'fundamental freedom'.

    1. Re:Hopefully. by setagllib · · Score: 1

      That's absolutely right ("hopefully"). The more secure and trustworthy (read: OpenBSD :P) code Microsoft and whoever else import, the safer the internet will be. I think security and quality should come before political agendas regarding defeating corporations. Microsoft is not going to go away any time soon, so it may as well gets its act together and release at least one secure product.

      As Theo himself said, their security is our security, since every compromised machine on the net is yet another drone to add to brute force networks or yet another gateway sniffing our packets. Security doesn't end at your network, it continues everywhere you can possibly connect.

      --
      Sam ty sig.
  58. Re:Why not work on a current project, I dont get i by Anonymous Coward · · Score: 1, Insightful

    The way I see it the OpenBSD wanted a slick and simple BGP daemon, not the kitchen sink.

    It's much better to do one thing very well than to try and do ok with every routing protocol under the Sun.

  59. I like HP better for access switches by JimmytheGeek · · Score: 3, Interesting

    I have some complaints about Cisco.

    1) Cost. We could buy NEW HP layer 2 switches for the price of refurb/used Cisco l2 switches. And the HP kit comes with a product lifetime warranty.

    2) Support cost. We're planning to replace our Cisco 12000 GSRs with Foundry or Juniper stuff. The maintenance contract cost alone justifies trashing the old equipment and buying new. WTF?

    3) IOS/CatOS variety Ever read a nightmarish vulnerability alert and had to figure out if it applied to you? And if so, what you need to upgrade to? There are THOUSANDS of versions, most of which are described generically. And at least once I've been told that a fix was backported, so the version number didn't increment.

    4) Usability - HP kicks their asses at the access switch level. It is much easier to set up a bunch of inter-tied VLANS. The syntax is clearer and cleaner. I think every config I've tried to do is easier on the HP family. We updated a bunch of equipment all at once, mostly one model (HP2524, with a few HP4108gl's). It may be that other members of the product line are lame.

    I will grant that Cisco tech support is good, and their stuff is good. But there are definitely elements of "We're No. 1, so open your wallet"

    1. Re:I like HP better for access switches by bill_mcgonigle · · Score: 1

      4) Usability - HP kicks their asses at the access switch level. It is much easier to set up a bunch of inter-tied VLANS.

      I agree with all of your points but this one is perplexing. I'm running 802.1Q VLAN trunking and the configuration is 2 lines on each of the trunked ports and 2, maybe 3 lines on each member port. How does HP improve?

      I'm glad to hear there's good competition as my 3 biggest complaints with Cisco are Price, Price, Price. I already recommend other solutions where frequent updates/contracts are required (VPN, IDS, etc) Heck, I can build a snort box for the price of yearly contract on the Cisco IDS.

      --
      My God, it's Full of Source!
      OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
    2. Re:I like HP better for access switches by JimmytheGeek · · Score: 4, Interesting

      Couple of examples:

      on the HP, the command line to set ports 1,13, 22-24 for vlan 200 is:
      config t (same as cisco)
      vlan 200
      untagged 1,13,22-24

      All done. Imagine your joy setting this for 172 ports on a fairly typical HP4108gl, vs your misery doing it one port at a time on a cisco 3548. Probably should exit config mode and save, but that's not unique to HP. "Tag" is literally what vlan config does. If you are cisco-trunking (more than one vlan across a single physical link), the ethernet datagram gets a vlan tag to separate it from the 'native' vlan of the link. HP doesn't obfuscate that the way Cisco commands do.

      switchport access native vlan foo
      switchport trunk allowed vlan foo, bar
      switchport trunk encapsulation dot1q
      switchport trunk mode trunk

      Plus pruning!

      To make port 25 what cisco calls a trunk, and pass traffic for vlan 200 and 300 on it, vlan 200 native:

      int vlan 200
      untagged 25
      int vlan 300
      tagged 25

      done. I've had some real problems getting the right config for a cisco switch to interoperate with the HP, but not vice-versa.

      You can also use a text-based menu, and toggle the vlan state (untagged, no, forbid, tagged) for each port. You see them all side by side, and that helps make sure you got the config correct.

      The cisco stuff just seemed crankier and less intuitive- on the cat2924, anyway, and to a lesser extent the 3548. I have two 3548s that will silently fail any vlan config commands - it accepts them, but no port behavior changes. Pending a catos update, they are basically netgears with a price tag.

      I grant that it is a feature to offer vlan types besides dot1q, but not one I welcome.

      Finally, on the higher end, we are burdened with VTP. I may be a luddite; I'm willing to grant that possibility for the sake of argument. But I hate automagic stuff like vtp. This just does not seem like the sort of thing we should trust our net infrastructure to work out as its whim dictates. This kind of thing just doesn't save enough sysadmin time to make up for the weird errors and such. And it's hard to turn vtp off.

      This post took on a lecturing tone - sorry about that. I don't presume to have greater knowledge of cisco and vlan tech.

      Oh - Snort rocks!

    3. Re:I like HP better for access switches by Beaker1 · · Score: 1

      I have to agree. I just put 6 2524's in a big ass warehouse and the total setup time was about 5 minutes each. They are extremely simple to configure with a couple of vlans and a trunk back to a central switch.

      --
      "Who hasn't slipped into the break room for a quick nibble on a love Newton before?" - Mr. Peterman.
  60. ALWAYS buy the CD when on projects by Loualbano2 · · Score: 2, Insightful

    ANYTIME you have a project that uses any software that can be bought in a box set, always buy from the project. Your employer, customer or grandma will not scoff at the tens and tens of dollars that you give to these guys to help them out.

    Hell, even if you spark up a mailserver in a pinch using downloaded ISOs, always go back and buy the damned box set later on. Make it a line item on your bill, include it in the budget, do whatever you have to do.

    I have purchaced a fair amount of packaged CD sets from Slackware, OpenBSD, Redhat, Debian, etc. and have never spent a single dime of my own money.

    -ft

    1. Re:ALWAYS buy the CD when on projects by setagllib · · Score: 1

      That's actually a pretty good idea. Double-whammie - help them and get a 'free' (for you) copy of a great system.

      Personally if I like what I see of OpenBSD when I try it, I'll buy it anyway, my money or not. It's the kind of thing that is so great you feel good having the real set of, as opposed to Windows where you feel even having a 'free' (cough) CD provided by Dell or whoever is a waste of money manufacturing. Not that I'm bashing Windows per se, it has its uses, but the license of one key per 'owner' (which nobody abides by anyway it seems) is ridiculous. With OpenBSD it's unencumbered - you buy the CD and that's it, do whatever (except clone it and resell, you have to make your own ISOs for that). Install it on every machine in a 1k box network, then give it to your friend to install on his box too.

      --
      Sam ty sig.
  61. Re:Throughput, Expansion Slots, Network Size, Mark by 74nova · · Score: 3, Insightful
    Just because it's BSD doesn't mean that it's going to be limited to PC Architecture.
    isnt the fact that its bsd the exact reason why it isnt limited to pc architecture? im no bsd guru, but i know its available for almost every processor in existence.
    --
    use your turn signal! you people act like it's divulging information to the enemy
  62. Re:Throughput, Expansion Slots, Network Size, Mark by Anonymous Coward · · Score: 0

    The proportions will change in near future, when PCI-Express based server mainboards will become more widespread. PCI-Express is a switched mesh of serial-transmission full-duplex point-to-point links. A chipset with 20 lanes (each with 2,5 Gb/s up- and downstream raw-bandwith) and e. g. four 10 GbE-NICs (in x4-Slots) could outperform the 24-Port GbE-router in theory.

    Small routers with PCIe and standard hardware running OpenBSD can be a cheap alternative to expensive proprietary Cisco-boxes imho.

  63. Re:Throughput, Expansion Slots, Network Size, Mark by Anonymous Coward · · Score: 0

    Well, I happen to do all the WAN routing for a fairly decent sized university, and our total aggregate Internet bandwidth is still just under 100Mb/sec.

    However, we are multihomed, so BGP is necessary. Not to mention, we're about to start needing some cheap routers to provide access to some community colleges and K-12 type schools, who will be required to run BGP.

    OpenBGPD on a high end PC would be a more cost effictive solution than going out and buying another Cisco 7206 for these implementations.

  64. Re: 48 Gbps cisco router is weird!!! by Anonymous Coward · · Score: 0

    Ohhh! My modem goes 0.000049 Gbps!!!

  65. What a dumb person looks like by Anonymous Coward · · Score: 0
    This is some noteworthy crap:
    So Windows and Linux are gaining share, as was said--and BSD gained a little. But it's still not growing as fast, and thus is losing "market share," as if you can believe what OS servers report (it is good security practice to report an OS other than what you actually run).

    What are you babbling. If you don't know what "market share" means, go look it up.
    Gaining share and gaining *market share* are exactly the same thing. Period.

    And what do you think, that Netcraft determined which OS people run by making phonecalls?... :-D

    Heh... GNU zealots. Spreading FUD, exactly like the corporations they hate so much.
    Luckily, you're too lame even to do that. :)

    1. Re:What a dumb person looks like by Anonymous Coward · · Score: 0
      You are apparently not bright enough to understand that share is a proportion. And BSD's proportion is shrinking (as is that of OS/2, AmigaOS, and other obsolete, marginalinzed operating systems), even though in raw numbers it's seeing an increase. The pie is growing faster than *BSDs piece, to put it into language you might be able to understand.

      You're calling me a zealot while the tiny few of you respond to every post as if it were a personal attack, while only being able to muster up an "overrated" for the original post--you people don't even have the courage to risk a little karma for your "convictions." And you're even easier to troll than the Apple faithful :).

    2. Re:What a dumb person looks like by Anonymous Coward · · Score: 0
      Some more GNU/FUD:
      You are apparently not bright enough to understand that share is a proportion. And BSD's proportion is shrinking (as is that of OS/2, AmigaOS, and other obsolete, marginalinzed operating systems), even though in raw numbers it's seeing an increase. The pie is growing faster than *BSDs piece, to put it into language you might be able to understand.

      Not only the *BSDs experience an increase in raw numbers.
      The *BSDs are gaining market share.
      These are the most recent data that can be found about it (June 2003).
      This means that, "to put it into language you might be able to understand", the *BSDs piece is growing faster than the pie.

      The FUD you GNU people are continuing to spread is just a display of how your community is pervaded by rotten politics. You're using exactly the *same* disgusting techniques applied by the corporations you hate so much.
      What's even uglier, you use them against the BSD people, whose only crime is to believe in freedom and liberty (BSD license) rather than communism (GPL license).
      Nope, it's not far-fetched - sadly.

    3. Re:What a dumb person looks like by Anonymous Coward · · Score: 0

      Netcraft data are unreliable and easily spoofed. How about posting something from a reliable source, like Gartner, that supports your conclusion that BSD is sweeping the world. I'll be waiting.

    4. Re:What a dumb person looks like by Anonymous Coward · · Score: 0
      From the referenced site:
      The reason for this is FreeBSD's deployment with the operators of shared hosting systems, where tens and even hundreds of thousands of sites are collectively administered as part of a single system. In this respect a relatively small number of people control the technology choices for an enormous number of people, many of whom have no idea what operating system they are using.

      Translation:

      A small number of zealots at hosting companies are inflating the statistics for *BSD by deploying it in a virtual hosting environment. One machine hosting thousands of vanity domains and "coming soon" pages, which is only really one server, is counted as thousands.
    5. Re:What a dumb person looks like by Anonymous Coward · · Score: 0
      Netcraft data are unreliable and easily spoofed. [...]

      And of course you can back this claim with some evidence.
      Not that I'm unwilling to believe in an source as reliable and authoritative as you. :)

    6. Re:What a dumb person looks like by Anonymous Coward · · Score: 0
      Oh why are you so clueless. This goes for Windows and Linux as well, where they're deployed by shared hosting operators.

      So, what really gives an advantage to FreeBSD is (as can be argued from the *original* text) the fact that FreeBSD is a choice favoured by the operators of shared hosting systems.
      Do you happen to know why? Are they zealots, or professionals who know very well what to pick? :)

      Anyway, this (the original article) is the only recent report I found that explicitly talks about FreeBSD's market share, and it says FreeBSD's *gaining* it. If not to disprove your FUD, I wouldn't even have searched for it because people using BSD usually have totally different technical and philosophical reasons.
      Now it's your turn to provide links for your "dwindling market share", "dying" claims.

      Come on, prove me wrong: share with us your "sources". :)

    7. Re:What a dumb person looks like by Anonymous Coward · · Score: 0

      So IOW Netcraft's all yhou got, which you've admitted is inaccurate, and you can't produce a citation from a reputable source such as Gartner. I'd say we're done here--perhaps the funeral for BSD and Arafat can be held simultaneously.

    8. Re:What a dumb person looks like by Anonymous Coward · · Score: 0

      If you don't know why it's unreliable, you have no business in a technical discussion about server identification.

    9. Re:What a dumb person looks like by Anonymous Coward · · Score: 0

      Who admitted what? Netcraft *is* accurate and of course reputable. And it says FreeBSD's market share is growing.
      I still haven't seen your sources, though. Maybe they contradict mine.
      Come on, make me happy: I'm just asking for proof that BSD's market is "dwindling", as you uttered. Am I asking too much? :)

    10. Re:What a dumb person looks like by Anonymous Coward · · Score: 0

      Maybe I was a little unpolite (sorry!), but I just asked you to back up your claim with some evidence.
      Don't tell me that you can't do that because you're a clueless troll.. I would never believe that. :)

    11. Re:What a dumb person looks like by acceleriter · · Score: 1

      How about you back yours up? You're the one making the claim that *BSD's market share is increasing, and haven't produced any reputable evidence.

      --

      CEE5210S The signal SIGHUP was received.

    12. Re:What a dumb person looks like by acceleriter · · Score: 1

      I don't need sources--it's a generally accepted fact that *BSD is dying. You know, it doesn't take a Kreskin and all that. The burden of proof is on those challenging known fact--that would be you.

      --

      CEE5210S The signal SIGHUP was received.

    13. Re:What a dumb person looks like by ulib · · Score: 1
      "acceleriter":
      >..[some babbling]..

      FreeBSD, Stealth-Growth Open Source Project (June 2004)
      Nearly 2.5 Million Active Sites running FreeBSD (June 2004)
      "FreeBSD has dramatically increased its market penetration over the last year."

      Bye, lamer, have a nice day. :)
      --
      Being able to read *other people's* source code is a nice thing, not a 'fundamental freedom'.

    14. Re:What a dumb person looks like by Anonymous Coward · · Score: 0

      Nice advocacy links--even they admit that although BSD is growing in terms of numbers, it isn't growing as fast as Linux. Thanks for proving my point, lamer :).

  66. Re:Throughput, Expansion Slots, Network Size, Mark by Anonymous Coward · · Score: 0

    And you can't put more than a handful of network cards in even the largest BSD-capable server--there simply aren't the expansion slots.

    Have you not played with many Alpha's or Sun's or other server class gear?

    Shit loads of PCI slots. Fucking shit loads. If you want them you can find them. Even ones that will run your favorite BSD.

  67. Re:Why not work on a current project, I dont get i by setagllib · · Score: 2, Interesting

    That's the BSD Way, as far as I have seen. To do one thing and do it very well, and only add more functionality if people really want/need it.

    Look at the BSD tools versus GNU tools. They do fundamentally the same things, but GNU tools are usually tens of times larger because they do lots of things only one or two people alive would want. This means those one or two people find GNU tools more convenient, while the rest of us like being able to compile the whole *BSD world in 1 hour on a slow machine, where a GNU-based system takes an hour to compile JUST glibc on the same hardware.

    In the running system, GNU tools are handier, since they have more modern defaults, more convenient shortcuts to doing things (default of . for find(1), default output of stdout instead of the tape device for tar, and so on), etc. but the BSD tools are usually a load easier to know the full functionality of. Look at BSD indent versus GNU indent (which is a fork of BSD indent). The latter has every feature under the sun, many of which never will be used. The former hasn't changed much in years and still does what it always did well, nobody complains. The latter can be more convenient, but at the cost of code size, sometimes even cleanliness... no thanks.

    But yeah, that's my point. The BSDs focus on the functionality something is meant for, and do it as cleanly as possible. The 'other' software doesn't have this focus. Which you consider 'better' is all about your priorities I suppose.

    --
    Sam ty sig.
  68. Re:Why not work on a current project, I dont get i by gedhrel · · Score: 1

    Heh, permit me a frivolous comment on the "BSD way": as Rob Pike put it, "cat came back from Berkeley waving flags."

  69. Re:Why not work on a current project, I dont get i by evilviper · · Score: 4, Insightful
    Zebra and Quagga already exist.

    They're unstable, incompatible, bloated, insecure, and quite importantly, virally bound to the GPL, which is most definately contrary to the BSD philosophy. PF was created (mainly) because the license was not acceptable.

    Improving the architecture of say Quagga will be more beneficial and probably welcome than forking out your own.

    To fix inherent problems, you almost always have to fork because of the incompatibilities. Plus, what advantage would it provide over starting from scratch? They're already screwed in the license department, since it's GPL'd.

    What would you rather do... Build a house from the ground up, or take someone's completely trashed and poorly built house, and try to repair the entire thing? Often times, starting from scratch is the better option.

    sounds much better than an all OpenBSD suite.

    To you, but you aren't among the developers, so you get no say. They wanted something for BSD, just like they did with OpenSSH, just like they did with OpenNTPD, and PF.

    If someone wants to put the effort into porting it, they can. If you want to import much of the code into Quagga, go right ahead. They see no benefit from doing that, though plenty of drawbacks for them, so they didn't do things that way.

    <LICENSE_RANT>
    I'd like to remind people that nothing has ever become a standard, with a GPL license attached to it. Things like TCP/IP, NFS, FTP, SMTP, DNS, all BSD (or even less restrictive) licensed, so others could actually use it, without having to sign the restrictive license that is the GPL. If nothing else, being BSD-licensed may give OpenBGPd a big audience of companies looking to integrate it.
    --
    Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
  70. Re:Throughput, Expansion Slots, Network Size, Mark by scottj · · Score: 1
    And, of course, you don't need to be running BGP on small networks ...
    I disagree. A small company that wishes to have a multi-homed internet connection needs BGP. 2 T1s. A moderately configured PC could easily handle that.
    --
    .-.--
  71. BSD is growing pretty fast. by Anonymous Coward · · Score: 0

    >I think some people believe it.
    They should get a clue then! :)
    FreeBSD, Stealth-Growth Open Source Project (June 2004)
    Nearly 2.5 Million Active Sites running FreeBSD (June 2004)
    "FreeBSD has dramatically increased its market penetration over the last year."

  72. ... or not. by Anonymous Coward · · Score: 0

    FreeBSD, Stealth-Growth Open Source Project (June 2004)
    Nearly 2.5 Million Active Sites running FreeBSD (June 2004)
    "FreeBSD has dramatically increased its market penetration over the last year."

  73. BSD's growing pretty fast. by Anonymous Coward · · Score: 0

    FreeBSD, Stealth-Growth Open Source Project (June 2004)
    Nearly 2.5 Million Active Sites running FreeBSD (June 2004)
    "FreeBSD has dramatically increased its market penetration over the last year."

  74. Re:dead...yeah right by Anonymous Coward · · Score: 0

    checkout distrowatch.com. FBSD is sure getting a helluva lot of attention

  75. Re:Throughput, Expansion Slots, Network Size, Mark by Anonymous Coward · · Score: 0

    OpenBGPD/OpenBSD is good for ISPs of all sizes and has been tested with hundreds of peers. Your only real limitation is the hardware you use. A proper server with fast CPU (think amd64 and *not* Intel), good buses, multiple PCI buses (or better yet, PCI-E), good NICs and good memory bandwidth (amd64 again) can route a hell of a lot of traffic.

  76. Reality Check by adiposity · · Score: 1

    > Every Zaurus owner I know runs OpenZaurus instead
    > of the Sharp software

    No offense, but I think this says a lot more about you (and the kind of people you hang out with) than it does about OpenZaurus. My guess is that these people bought the Zaurus with the intention of installing OpenZaurus, rather than buying the Zaurus, and then deciding to install a different OS.

    I'd bet money that the average Zaurus user doesn't use OpenZaurus. However, this isn't to say it's not a great OS, or very successful as you've mentioned. It just means that you can't base statistics on a limited group of people, especially when they're are nerds (no offense intended--I consider myself a nerd).

    -Dan

  77. Re:Throughput, Expansion Slots, Network Size, Mark by mirabilos · · Score: 1

    Henning says it's planned, he's probably going for
    OSPF first.

    As usual: shut up and hack

    (ie. they won't talk before it at least sort of
    works, and you ought to help them, instead of
    demanding in public fora.)

    --
    My Karma isn't excellent, damn it! (And /. still does not get UTF-8 right in 2012. Wow.)
  78. Re:Throughput, Expansion Slots, Network Size, Mark by Anonymous Coward · · Score: 0

    > I wonder, then: where is the market for this....?

    For example, RR clients (mostly in transit AS's).

  79. Nope by Anonymous Coward · · Score: 0

    I think gated does RIP only.