News for hackers. Stuff that matters.

A comment on pfSense: Open source network firewall distribution. Parent comment

Re:pfSense: Open source network firewall distribution by cperciva on Friday February 10, 2017 @04:25PM (#13619033)
pfsense uses FreeBSD's fork of pf, which is years out of date

It is true that FreeBSD's pf lacks some of the recent improvements which have been made in OpenBSD's pf.

It is also true that OpenBSD's pf lacks some of the recent improvements which have been made in FreeBSD's pf.

[ Parent | on HN ]
Re:pfSense: Open source network firewall distribution by milcron on Friday February 10, 2017 @04:56PM (#13619251)
What are some of FreeBSD's improvements, apart from multithreading?
[ Parent | on HN ]
Re:pfSense: Open source network firewall distribution by allanjude on Friday February 10, 2017 @07:54PM (#13620272)
VIMAGE / VNET, which allow you to have an instance of pf for each jail. Very useful
[ Parent | on HN ]
Re:pfSense: Open source network firewall distribution by gonzo on Saturday February 11, 2017 @02:54PM (#13624408)
The MT work is important, don't be so ready to dismiss it. There has also been work on speeding up pf outside of the MT work.
[ Parent | on HN ]
Re:pfSense: Open source network firewall distribution by milcron on Monday February 13, 2017 @03:55PM (#13638675)
I'm just not sure how significant the MT work is. OpenBSD's pf has also had performance improvements since 4.5; it would be good to see a benchmark.
[ Parent | on HN ]