3 ms·
For someone who has good grounding in FreeBSD and the above technologies already, I can see how that decision would make sense (if you know dtrace well, you pro
by patrec 6y ago
For someone who has good grounding in FreeBSD and the above technologies already, I can see how that decision would make sense (if you know dtrace well, you probably invested several man weeks into it -- why throw that away?). Typically the situation will be the reverse however (almost anyone you can hire at any level will know more Linux than FreeBSD) and the technological benefits you list do not seem like they would make up for that.
ZFS: these days it's developed on and for linux first and foremost, as far as I can tell (FreeBSD moved to ZFS on linux, correct?).
Dtrace: linux finally caught up and basically went one better with perf/ebpf.
kqueues: as you said, io_uring looks like it will take care of that (and probably put linux ahead).
pf: I can see how pf is compelling if what you want is first and foremost some firewall box, and you take whatever OS comes with the firewall (I haven't used pf, but most people seem to agree its significantly nicer than iptables et al).
- dijit 6y agoiptables has been supplanted by nftables; though it's not as highly scalable as pf and uses a lot of iptables terminology. I begrudge the notion though, that desiring something like pf is because you primarily want a firewall box; the syntax is much cleaner and ultimately the performance is better (without bolt-ons like conntrack). For example these are basic firewalls with rate limiting pf: https://git.drk.sc/darkscience/ds-salt/-/blob/master/states/base/security/freebsd/firewall https://git.drk.sc/darkscience/ds-salt/-/blob/master/states/... iptables: https://git.drk.sc/darkscience/ds-salt/-/blob/master/states/base/security/debian/ipv4-iptables https://git.drk.sc/darkscience/ds-salt/-/blob/master/states/... here's what we have for nft: https://git.drk.sc/darkscience/playbooks/-/blob/a09507e2a9b6e44dcba47b5d4c36a1901a2beac1/roles/firewall/templates/nftables.conf https://git.drk.sc/darkscience/playbooks/-/blob/a09507e2a9b6...
- patrec 6y agoI'm not saying you wouldn't desire something like pf when using linux. Of course you would. But in the grand scheme of things, I don't see many people choosing FreeBSD over Linux for pf unless they want a firewall box.