Future of pf / firewall in FreeBSD ? - does it have one ?

Mike. the.lists at mgm51.com
Sun Jul 20 16:31:04 UTC 2014


On 7/20/2014 at 5:38 PM Franco Fichtner wrote:

|On 20 Jul 2014, at 15:39, Mike. <the.lists at mgm51.com> wrote:
|
|> imho, the root problem here is that an effort to implement a
single
|> feature improvement (multi-threading) has caused the FreeBSD
version
|> of pf to apparently reach a near-unmaintainable position in the
|> FreeBSD community because improvements from OpenBSD can no longer
be
|> ported over easily.   FreeBSD's pf has been put in a virtual
|> isolation chamber due to the multi-threaded enhancement.
|> 
|> Was it worth it?
|
|Yes.  This happened *three times* in BSD land now.  How much more
|proof does it take to make that clear?
|[snip]
 =============


In this instance, more proof would consist of pf development not
wallowing in inactivity.


imo, tactical changes were implemented in pf without the strategic
negative consequences affecting the decision process guiding the
implementation of those tactical features.    And that's backwards.
Strategies direct tactics, not vice versa.






More information about the freebsd-questions mailing list