From owner-freebsd-stable@FreeBSD.ORG Thu May 31 13:33:21 2012 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 4F85E106566B for ; Thu, 31 May 2012 13:33:21 +0000 (UTC) (envelope-from ml@my.gd) Received: from mail-ee0-f54.google.com (mail-ee0-f54.google.com [74.125.83.54]) by mx1.freebsd.org (Postfix) with ESMTP id CF6A38FC19 for ; Thu, 31 May 2012 13:33:20 +0000 (UTC) Received: by eeke49 with SMTP id e49so392663eek.13 for ; Thu, 31 May 2012 06:33:19 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding :x-gm-message-state; bh=i5dJFg0Ei8vrOzj7GkNxQcKDwXJFVO/G5QoLce030dM=; b=XFMTUKiaqnvcenBEAjT4nZlHOFSw4KfZwcf6pVLrjyYrQM3gcVwq29H5isP6UTC+Q0 gBmgWevxrWYf1RinI/N4VFZqzIV6LsE9qUFGlnDLuEi1rWIEamzeeyeFliEbnjWmz3I5 1iYtqJNAXEnsgcpe6f7zcjSqPcYhF+Xp5xV0zAIFWTrgABjDlggCE0qENpbFTK7kbzsq zwTL0s4m2/ctKiD5xk4Sh5JGfWD5HmC4XiSjm7RuwLyTWTvHVhC69OKZKVYlWMWrbE6q MAP5NuZ/kkZLJS6YccpUp6jhrkYZdX4LcESEMtgHBMhOb9/8xqhwDwtrwI5KbwyO5cD+ qQJw== Received: by 10.14.53.6 with SMTP id f6mr8057894eec.214.1338471199502; Thu, 31 May 2012 06:33:19 -0700 (PDT) Received: from dfleuriot-at-hi-media.com ([83.167.62.196]) by mx.google.com with ESMTPS id e45sm5012343eeb.6.2012.05.31.06.33.18 (version=SSLv3 cipher=OTHER); Thu, 31 May 2012 06:33:18 -0700 (PDT) Message-ID: <4FC7731C.2030204@my.gd> Date: Thu, 31 May 2012 15:33:16 +0200 From: Damien Fleuriot User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:12.0) Gecko/20120428 Thunderbird/12.0.1 MIME-Version: 1.0 To: Holger Kipp References: <4FC742BF.4080005@my.gd>, <20120531102127.GV39168@e-new.0x20.net> <5A58FAE7-F176-4E69-9460-6DDB12064BAE@alogis.com> In-Reply-To: <5A58FAE7-F176-4E69-9460-6DDB12064BAE@alogis.com> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Gm-Message-State: ALoCoQkYcDaHTT1UEqeWQuVxzW81pzeVyDRLwrtD/dKWIL1fD1ea4UJLepXiu24cSoBi4wHVl6Rs Cc: "freebsd-stable@freebsd.org" , Lars Engels Subject: Re: Why Are You Using FreeBSD? X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 31 May 2012 13:33:21 -0000 On 5/31/12 12:32 PM, Holger Kipp wrote: > Hi, > > Am 31.05.2012 um 12:24 schrieb "Lars Engels" : > >> On Thu, May 31, 2012 at 12:06:55PM +0200, Damien Fleuriot wrote: >>> >>> On 5/30/12 8:20 PM, David Chisnall wrote: >>>> Hi Everyone, >>>> >>>> This is off-topic, so please feel free to disregard it, but I'm sending it to this list in the hope that it will reach a largish number of users. >>>> >>>> I am currently looking at updating some of our advocacy material (which advertises exciting new features like SMP support), and before I do I'd like to get a better feel for why the rest of you are using FreeBSD. If you had to list the three things you most like about FreeBSD, which would you pick? Are they the same as when you first started using it? >>>> >>>> David >>> >>> >>> We're using FreeBSD here only for firewall boxes. >>> >>> >>> Reasons for using FBSD for firewalls: >>> - CARP >>> - relayd >>> - PF >>> - pfsync >>> >>> Reasons I can't get management to use FBSD for regular servers (web, >>> haproxy, db...): >>> - "hard" to use >>> - update process is "hard", time-consuming and annoying (as opposed to >>> debian's for example) >>> >>> A regular debian update is 5 minutes + reboot >>> A regular FBSD update is about 1.5 hour + 3 reboots (after >>> installkernel, installworld, rebuild of ports) >> >> But how often do you need to update? > > That reminds me - there is still a 2.2.8 system up and running that needs to be replaced ;-) > > For a server farm, one can use a central server who provides all packages that need to be upgraded, so it is usually only one system that needs a longer time. All others just mount the directories and install/upgrade using compiled world and /usr/ports/packages/All :-) > > Nice and easy. > > Best regards, > Holger > > Your idea has merit and we've already considered it. However, these boxes are on different VLANs for security and confinement reasons and I loathe putting them on a shared VLAN just for this purpose. Besides, if the main server were to crash, we'd run into problems. We don't wish to introduce a SPOF.