Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 05 Sep 2012 16:28:23 +0200
From:      Thomas Steen Rasmussen <thomas@gibfest.dk>
To:        Gleb Smirnoff <glebius@FreeBSD.org>
Cc:        pf@FreeBSD.org
Subject:   Re: [HEADS UP] merging projects/pf into head
Message-ID:  <50476187.8000303@gibfest.dk>
In-Reply-To: <20120905115140.GF15915@FreeBSD.org>
References:  <20120905115140.GF15915@FreeBSD.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On 05-09-2012 13:51, Gleb Smirnoff wrote:
>   Hi!
>
>   [announce goes both to net@ and pf@, but any discussion should
>    go on on pf@FreeBSD.org only, please]
>
>   As you already may now, last half a year I've been working on
> making pf SMP-scalable and faster in general. More info can be
> found here:
>
> http://lists.freebsd.org/pipermail/freebsd-pf/2012-June/006643.html
> http://lists.freebsd.org/pipermail/freebsd-pf/2012-June/006662.html

Hello Gleb (and list),

Your work seems very exciting from a performance standpoint, and it
is certainty something I am looking forward to. Please don't take the
following as a critique of your important work :)

In your orignal announcement you confirmed my fears that this work
will make our pf divert a lot from OpenBSDs pf, making bulk code-imports
impossible in the future. As you know we are stuck on the old pf-syntax,
how will we ever get to the new pf-syntax if your work goes into HEAD ?

Currently the common "pf-ecosystem" that we've always more-or-less
shared with OpenBSD seems to be crumbling. If we are going to continue
along our own "branch" of pf, with old syntax and SMP support, and who
knows what else in the future, should we consider renaming it to avoid
having two similar-but-not-identical firewalls with the same name ?


Best regards,

Thomas Steen Rasmussen



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?50476187.8000303>