various openntpd things

? With ntp.org there are various tools that the user could run to get the current status. That's a requirement if you want to monitor the time sync status of your servers via Nagios or something like that. -- Florin Andrei http://florin.myip.org/ [demime 1.01d removed an attachment of type text/x

Re: various openntpd things

On 10/22/2010 02:09 PM, Florin Andrei wrote: First off, see attachment for an updated version of the spec file for the portable version tarball. Apparently attachments are removed. Okay, here's an online copy: http://dl.dropbox.com/u/29966/openbsd/openntpd.spec.txt -- Florin Andrei http

Re: Great 4.2 song!

Matthias Pfeifer wrote: just received my openbsd 4.2 CD set. And THANKS for this great song. A kind of funky mixed with good old rock ;) Anybody can put a .flac or even .wav.gz copy for me on a server somewhere? My CD is scratched about 2/3 into the song. :-( -- Florin Andrei http

Re: Great 4.2 song!

Jeremy C. Reed wrote: On Wed, 17 Oct 2007, Florin Andrei wrote: Anybody can put a .flac or even .wav.gz copy for me on a server somewhere? My CD is scratched about 2/3 into the song. :-( Not a flac or wav, but see http://www.openbsd.org/lyrics.html Well, I was hoping to rebuild

SOLVED [was: firewall is very slow, something's wrong]

Florin Andrei wrote: ## Huge performance improvements in the network stack, including: * In pf, store routing table ID, queue ID etc directly in the packet header mbuf instead of using mbuf tags (which use malloc'd memory). This yields a 100% improvement in pf performance

Re: SOLVED [was: firewall is very slow, something's wrong]

and netblast, please post it. I'm especially interested in generating lots of small packets, which is difficult. -- Florin Andrei http://florin.myip.org/

Re: [side thread] security implcations of multiple kernel threads?

-- Florin Andrei http://florin.myip.org/

Re: firewall is very slow, something's wrong

Henning Brauer wrote: * Florin Andrei [EMAIL PROTECTED] [2007-10-09 19:34]: then, an i386 kernel should perform considerably better than amd64 for firewalling/routing/... That is surprising. What is the reason? we dunno really. it hasn't been benched in sometimesoit might not even be true

Re: firewall is very slow, something's wrong

Stuart Henderson wrote: On 2007/10/04 17:48, Florin Andrei wrote: All firewall rules are written as stateless as possible - I don't need stateful filtering, the setup is very simple (allow HTTP inbound, allow a few ICMP types, and that's it). congestion116169

Re: firewall is very slow, something's wrong

Florin Andrei wrote: I expected OpenBSD 4.1 to do better. But the thing is, even without the UDP flood, the OpenBSD firewall is very slow. I am downloading a huge file through it, via HTTP, and all I get is 4 Mbyte / sec. With Linux I get 112 Mbyte / sec. Something's wrong. Or I'm doing

Re: firewall is very slow, something's wrong

rawdev=0x302 -- Florin Andrei http://florin.myip.org/

firewall is very slow, something's wrong

0s LIMITS: stateshard limit1 src-nodes hard limit1 frags hard limit 5000 tableshard limit 1000 table-entries hard limit 10 OS FINGERPRINTS: 696 fingerprints loaded -- Florin Andrei http://florin.myip.org/

max number of connections through the firewall

? -- Florin Andrei http://florin.myip.org/

Re: recommended hardware for Gigabit firewall?

Daniel Ouellet wrote: Florin Andrei wrote: I'm building several firewalls that need to be able to sustain 1000 Mbit throughput. We're using AMD64 processors a lot, so that's the kind of architecture I'm looking at right now. I will use OpenBSD 4.1 64 bit version. The set of rules

recommended hardware for Gigabit firewall?

cards and motherboards? Anything that I should avoid - hardware known to have issues with this kind of requirements? -- Florin Andrei http://florin.myip.org/

Re: hardware needed for network stack performance work

) -- Florin Andrei http://florin.myip.org/