5 ms·
I considered both and ended up just using pf on OpenBSD. Very simple config on top of a rock solid OS.
by huy-nguyen 5y ago
I considered both and ended up just using pf on OpenBSD. Very simple config on top of a rock solid OS.
- technofiend 5y agoOpenBSD is also my go to. The only caveat I'll throw out is when I upgraded to gigabit internet I discovered OpenBSD on the protectli FW4B couldn't keep up. In fact in iperf benchmarks it pushed ~300 Mb/s to FreeBSD's 600 Mb/s. Considering all the work done on Linux's network stack I plan to try it next to see if I can squeeze any more out of the hardware. Just means anyone who wants to try OpenBSD should spec something a little more powerful than that appliance.
- flatiron 5y agoMakes sense. Open bsd focuses on code quality and security not performance. I bet a lot of DMA tricks are poo poo’d by openbsd
- pak9rabid 5y agoLinux + nftables isn't a bad combination. Certainly an improvement over the old iptables userspace.
- Lammy 5y agoI don’t know if it would fix your problem, but pf on FreeBSD is SMP-enabled unlike OpenBSD’s. You have to deal with using the “old” pf.conf syntax though.