Hacker News Reader

I've used OpenBSD primarily for network edge and utility services. Things such as a firewall, gateway, vpn/tunnel connector, ipv6 router, dns server, dhcpd, ntpd, lightweight httpd, imapd, SMTP forwarder, and ssh/shell access. I've also installed it for the sole purpose of playing atc, the air traffic controller game. Hardware support and raw performance are the only things that keep me on Linux in most server roles.

View on HN

I have been wondering why there aren't any commercial router based on openbsd.

You can create a firewall handling a 1Gb/s link with OpenBSD, but passed that, it's quite limited.

Even with top end hardware, we could not go past ~5Gb/s with simple pf rules and after a lot of tweaking. With FreeBSD or Linux, we got the 10Gb/s out of the box with similar rules.

That's for the network part.

As for userland application, it's also slower than Linux or FreeBSD, I remember benching some OpenSSL/LibreSSL based application. On the same hardware I was at 200 transaction/s (transaction ~= RSA signature) with Linux/FreeBSD, with OpenBSD I was at 150 transaction/s, so significantly slower.

That's what hardenedBSD [https://hardenedbsd.org/] is for :) FreeBSD with lots of the same bells and whistles security features OpenBSD is known for.

Genua has products based on OpenBSD: https://www.genua.de/en.html

Reply on news.ycombinator.com