From owner-freebsd-current@FreeBSD.ORG Mon Jul 21 11:12:45 2014 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 04C1EB84; Mon, 21 Jul 2014 11:12:45 +0000 (UTC) Received: from forward3l.mail.yandex.net (forward3l.mail.yandex.net [IPv6:2a02:6b8:0:1819::3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "forwards.mail.yandex.net", Issuer "Certum Level IV CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 897C02648; Mon, 21 Jul 2014 11:12:44 +0000 (UTC) Received: from smtp19.mail.yandex.net (smtp19.mail.yandex.net [95.108.252.19]) by forward3l.mail.yandex.net (Yandex) with ESMTP id C6F8B150130E; Mon, 21 Jul 2014 15:12:31 +0400 (MSK) Received: from smtp19.mail.yandex.net (localhost [127.0.0.1]) by smtp19.mail.yandex.net (Yandex) with ESMTP id 4BF78BE00E6; Mon, 21 Jul 2014 15:12:31 +0400 (MSK) Received: from 84.201.164.118-vpn.dhcp.yndx.net (84.201.164.118-vpn.dhcp.yndx.net [84.201.164.118]) by smtp19.mail.yandex.net (nwsmtp/Yandex) with ESMTPSA id kWMeRnPJdx-CUAistTi; Mon, 21 Jul 2014 15:12:30 +0400 (using TLSv1 with cipher AES128-SHA (128/128 bits)) (Client certificate not present) X-Yandex-Uniq: b3d5f938-c5fb-4ff8-869d-f993f1bf0cd4 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1405941150; bh=RmwkCOjc2PH5D+lAaTSej4qGKSBMXDe3QVsifjEMKyI=; h=Message-ID:Date:From:User-Agent:MIME-Version:To:Subject: References:In-Reply-To:X-Enigmail-Version:Content-Type; b=VdnU+tqEZ1xOmHabsno4spENqa9zYojw67jiSQ2DHoZyVPAOszDqA1CQq+92+RPYE qeYhfmGHxT8XvJ6bbVRg/ukTwa1v8kGrrDxb78bRt2s6+v6TJTLM5sCx2GsSDJClLz svDTKffDzjW39RQYK6VogytEN7zHz6Iqw+fS+skw= Authentication-Results: smtp19.mail.yandex.net; dkim=pass header.i=@yandex.ru Message-ID: <53CCF596.1070302@yandex.ru> Date: Mon, 21 Jul 2014 15:12:22 +0400 From: "Andrey V. Elsukov" User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 MIME-Version: 1.0 To: Maxim Khitrov , FreeBSD Mailing List , freebsd-current@freebsd.org Subject: Re: Future of pf / firewall in FreeBSD ? - does it have one ? References: <53C706C9.6090506@com.jkkn.dk> <20140718110645.GN87212@FreeBSD.org> <20140718151255.b3e677d9.gerrit.kuehn@aei.mpg.de> <53CA2D39.6000204@sasktel.net> <20140720123916.GV96250@e-new.0x20.net> In-Reply-To: X-Enigmail-Version: 1.6 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="EITUmaAVUtsHLdssNwHpA0G0W8jTQ9d3L" X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jul 2014 11:12:45 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --EITUmaAVUtsHLdssNwHpA0G0W8jTQ9d3L Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable On 20.07.2014 18:15, Maxim Khitrov wrote: > In my opinion, the way forward is to forget (at least temporarily) the > SMP changes, bring pf in sync with OpenBSD, put a policy in place to > follow their releases as closely as possible, and then try to > reintroduce all the SMP work. I think the latter has to be done > upstream, otherwise it'll always be a story of diverging codebases. > Furthermore, if FreeBSD developers were willing to spend some time > improving pf performance on OpenBSD, then Henning and other OpenBSD > developers might be more receptive to changes that make the porting > process easier. Even if you just drop current PF from FreeBSD, there is nobody, who want to port new PF from OpenBSD. And this is not easy task, as you may think. Gleb has worked on rewriting PF more than half year. So, return back all improvements after import will be hard enough and, again, nobody want to do it. :) --=20 WBR, Andrey V. Elsukov --EITUmaAVUtsHLdssNwHpA0G0W8jTQ9d3L Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (FreeBSD) iQEcBAEBAgAGBQJTzPWbAAoJEAHF6gQQyKF6URMIAImzr/5fuPhtMn6ucHQN/iXS c9J4cuB3IBWrK0UhaNPloPk9sXthIeNqFg0rX7QXu2QGTkkxYvJo50LkdIoftokG jgozS5QZFg7ojcWBxts0LNAAo/keSv28gmDQgDQSimb5VX/Nj6dwlYjb3XW9iyGc Gd8FWMJz04Pi0iUGkTeFUOuVlBMmT0ktbSfiKsj0LHRmMmTvPYtoC7h2g1Q4Ukte xskOpj3vAH0eAdhlIGpCr7yZkKFzIIDwZAyj8gyBijT2NjxOE7HOWyTJplleO1wE IgcO2ta54ctsFHnmulCqEMKJV1F94DIh1bPWuEdqbo9ePjY9NKzqgda6nzDSR+I= =Xfip -----END PGP SIGNATURE----- --EITUmaAVUtsHLdssNwHpA0G0W8jTQ9d3L--