New User, new server

[Peter Ludikovsky]

Hello,

I recently acquired a former office tower to replace my old home server
(Debian 8), itself an even older office tower. As it's my primary
storage location for images and documents I want something stable, and I
want to try something besides Linux, so I'm going for FreeBSD
11-RELEASE. Which brings a few questions:

1) The new machine comes with a 128G SSD, in addition to the 2 4T HDDs
from the older server. I'd like to set up ZFS root, with a slice of the
SSD as ZIL and L2ARC, and the root mirrored across the SSD and the 2
HDDs. Does this make sense, and if so what would be the ideal slice
layout? Or should I just use the whole SSD as ZIL/L2ARC?

1.1) Can I start this setup with just the SSD an one HDD, as to keep the
old server alive until everything is migrated?

2) Moving data from the old machine. Can I run zfs send/receive to get
the ZFS on Linux datasets onto FreeBSD, or do I need to (r)sync?

3) Firewalling: PF, IPFW, or IPFilter? The machine will be behind an ISP
provided router, but I'm paranoid enough to want an additional firewall
on that machine, and one that plays nice with fail2ban at that.

4) As far as I understand it the host plays gateway for jails. Does that
mean that any firewalling is done there too? If so, is any special
configuration required besides enabling IP forwarding? (NAT, …)

5) Currently all services on the machine run together. With FreeBSD I'd
like to jail them. Is there an easy way to convert, or will I be
creating jails for the services & shovel the data over as if it's a
fresh install?

Any pointers are appreciated. I'm in no hurry (old machine ain't dying
yet), and I'd rather do it slow & clean than fast & dirty.

Regards,
/peter

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20170620/e828c36d/attachment.sig>