It's not a "half-finished" server, it's a new server written using OpenBSD's existing development practices, sharing code with relayd(8) in base. For OpenBSD httpd(8), 'featuritis' is being avoided so that the codebase remains simple and maintainable.
I've never heard of Hiawatha, but the GPL licencing makes it inappropriate for the base system. It is available as a package and in the ports, along with nginx and many other servers.
Peter N. M. Hansteen's PF tutorial and books are recommended reads, Peter remains involved with the developers and the information stays relevant and useful. He also ensures that readers using other BSD systems, especially with older versions of pf, can learn just as much from it.
Michael W Lucas is another author that writes books for both the BSD and sysadmin communities, similarly, he works closely with developers and users to release these short, yet all-encompassing tomes of information, covering a wide variety of topics.
And of course, official documentation is great. The effort of many people working to improve, Jason McIntyre improving readability and overall quality, Ingo Schwarze's amazing work on mandoc(1) tools. OpenBSD's FAQ, which is usually the first step people take to learn more about the system, is maintained by Nick Holland.
OpenBSD also has support for SMEP/SMAP on newer Intel processors in addition to NX, which at least makes arbitrarily poking around memory a little more risky.
Also related, Peter N. M. Hansteen is auctioning off the first signed copy The Book of PF, 3rd edition. He will be supporting the OpenBSD project by donating the amount raised to the OpenBSD Foundation.
If any vendor has proprietary drivers for OpenBSD, they would undoubtedly be using better kernel interfaces directly. Especially for something like a driver for a hardware RAID controller.
LKM(4) support has mostly been only "compile tested" for years. Nothing uses it seriously, at the time of it's removal.. the ports tree contained a single port making use of it.. a firmware flasher for some Dell systems.
Why? It mostly used for compat_linux(8) anyway, which is i386 only. Nobody was using mount_procfs(8) without the ancient -o linux option. It was broken for months before anyone noticed.
OpenBSD's httpd(8) supports HTTP redirects, and it certainly seems possible to redirect requests to i.e: php-fpm.
location "*.php" {
fastcgi socket "/path/to/php-fpm.sock"
}
location "/" {
block return 301 "/index.php"
}
Reyk Floeter (reyk@) has a Wiki with some additional example configurations, contribute more:
https://github.com/reyk/httpd/...
It's not a "half-finished" server, it's a new server written using OpenBSD's existing development practices, sharing code with relayd(8) in base. For OpenBSD httpd(8), 'featuritis' is being avoided so that the codebase remains simple and maintainable.
https://github.com/reyk/httpd/...
I've never heard of Hiawatha, but the GPL licencing makes it inappropriate for the base system. It is available as a package and in the ports, along with nginx and many other servers.
Peter N. M. Hansteen's PF tutorial and books are recommended reads, Peter remains involved with the developers and the information stays relevant and useful. He also ensures that readers using other BSD systems, especially with older versions of pf, can learn just as much from it.
* The Book of PF, 3rd Edition, 2014 - ISBN: 978-1593275891
* http://home.nuug.no/~peter/pf/
Michael W Lucas is another author that writes books for both the BSD and sysadmin communities, similarly, he works closely with developers and users to release these short, yet all-encompassing tomes of information, covering a wide variety of topics.
https://www.michaelwlucas.com/...
* Absolute OpenBSD, 2nd Edition, 2013 - ISBN: 978-1593274764
* SSH Mastery, 2012 - ISBN: 978-1470069711
* Sudo Master, 2013 - ISBN: 978-1493626205
And of course, official documentation is great. The effort of many people working to improve, Jason McIntyre improving readability and overall quality, Ingo Schwarze's amazing work on mandoc(1) tools. OpenBSD's FAQ, which is usually the first step people take to learn more about the system, is maintained by Nick Holland.
http://www.openbsd.org/faq/
http://www.openbsd.org/cgi-bin...
OpenBSD also has support for SMEP/SMAP on newer Intel processors in addition to NX, which at least makes arbitrarily poking around memory a little more risky.
http://freshbsd.org/search?pro...
http://freshbsd.org/search?pro...
Also related, Peter N. M. Hansteen is auctioning off the first signed copy The Book of PF, 3rd edition. He will be supporting the OpenBSD project by donating the amount raised to the OpenBSD Foundation.
http://bsdly.blogspot.com/2014...
If any vendor has proprietary drivers for OpenBSD, they would undoubtedly be using better kernel interfaces directly. Especially for something like a driver for a hardware RAID controller. LKM(4) support has mostly been only "compile tested" for years. Nothing uses it seriously, at the time of it's removal.. the ports tree contained a single port making use of it.. a firmware flasher for some Dell systems.
Why? It mostly used for compat_linux(8) anyway, which is i386 only. Nobody was using mount_procfs(8) without the ancient -o linux option. It was broken for months before anyone noticed.
Support for RSA and (non-EC)DSA key types might be added eventually; even sooner if you sent patches.