3 ms·
> conversely, running a firewall on something like ZFS also sounds like too much. this makes no sense. firewalling does not touch the filesystem very much if a
by znpy 11mo ago
> conversely, running a firewall on something like ZFS also sounds like too much.
this makes no sense. firewalling does not touch the filesystem very much if at all.
what FS is being used is essentially orthogonal to firewalling performances.
if anything, having a copy-on-write filesystem like ZFS on your firewall/router means you have better integrity in case of configuration mistakes and OS upgrade (just rollback the dataset to the previous snapshot!)
- hnav 11mo agomy point was that if a hardware vendor were to approach this problem, they'd probably have 2 (prev,next) partitions that they write firmware to, plus separate mounts for config and logs, rather than a kitchen-sink CoW FS
- ssl-3 11mo agoWhat aspect of ZFS prevents the kind of layout that you envision, do you suppose? ZFS works just fine with partitions, if that's how a person/company/org wants to use it today.