See it here in action:
“Imagine this scenario: Another business group in your midsize company needs some new network connectivity, but they also require a number of network security features, including an integrated access point, user authentication, VPN capabilities, and a firewall to separate a certain group from the rest of the network. Oh, and they also want access to Snort and Nmap. Luckily, pfSense offers all of these features along with a number of customization options.”
Keith Barker explains in this video tutorial how to configure an SMB-caliber firewall
“This BETA includes a refactoring of the Active Directory and LDAP integration. It has a rework of serial port support, adding the ability to set the serial port speed. The NFS sharing was refactored in BETA2 with an eye towards maintaining compatability with sharing schemes set up in previous FreeNAS releases. The refactored sharing is more powerful and flexible than previous releases, while enforcing the OS based rules. Support for the LSI “skinny” RAID conrollers was added.”
Michael Dexter has written up a review of PC-BSD 9.1.
He thinks PC-BSD is a great system with many window managers to choose from, has a good package manager and great jails management.
However, FreeBSD’s weak point is PC-BSD‘s: hardware support.
“It took time but PC-BSD is really shaping up nicely and teaches quite a few lessons about holistic OS design. I haven’t even explored its “Life Preserver” backup/FreeNAS option but the developers are clearly are focusing on adding the missing tools of the highest value. They are also focused on creating a complete client/server ecosystem and PC-BSD 9.1 users can look forward to expanded command line alternatives to the GUI tools. PC-BSD also has quite a few invisible features such as the unified base OS .txz it uses for jail creation that I may end up using for building BHyVe images. PC-BSD 9.0 and newer is truly worth a try and I applaud the progress its developers have made.”
“As you already may now, last half a year I’ve been working on making pf SMP-scalable and faster in general. More info can be found here:
Since that announce in June, I’ve been running experimental code for more than 2 months in production on several routers. Also, some brave people volunteered to be beta-testers and also run the experimental branch in last couple of months. Code proved to be stable enough.
The new code performs better in production: less CPU load, less jitter, more responsive system under high load. It performs better under synthetic benchmarks like random generated UDP flood. It performs much better when DoS comes in.”
Ever wanted to set up a pfSense firewall/router with content filtering? Howtoforge has one of the easiest tutorials to help you set this up. If you have a spare box, there’s no reason now to wait any longer: pfSense – Squid + Squidguard / Traffic Shapping Tutorial
In this tutorial I will show you how to set up pfSense 2.0.1 up as an Internet Gateway with Squid Proxy / Squidguard Filtering. I will also show that you have to configure some extra features of pfSense like traffic shapping with squid.
The PC-BSD 9.1 review starts at 39:50.
Notes and Summary
Dimitry Andric, a FreeBSD developer, has carried out some performance tests to explore the impact that LLVM/Clang as the default FreeBSD compiler has on FreeBSD 10, compared to GCC 4.2.1 and GCC 4.7.1. He concludes that to build FreeBSD with Clang less RAM is used and the compilation finishes quicker. Clang comes out in the benchmarks mostly ahead of GCC on FreeBSD.
I recently performed a series of compiler performance tests on FreeBSD 10.0-CURRENT, particularly comparing gcc 4.2.1 and gcc 4.7.1 against clang 3.1 and clang 3.2.
The attached text file contains more information about the tests,
some semi-cooked performance data, and my conclusions. Any errors and omissions are also my fault, so if you notice them, please let me know.
The executive summary: clang compiles mostly faster than gcc sometimes much faster), and uses significantly less memory.
Finally, please note these tests were purely about compilation speed,
not about the performance of the resulting executables. This still
needs to be tested.
You can check the benchmarks here: Clang/llvm performance tests on FreeBSD 10.0-CURRENT
The development of FreeBSD ports is done in Subversion nowadays. Fy February 28th 2013 the FreeBSD ports tree will no longer be exported to CVS. Therefore ports tree updates via CVS or CVSup will no longer available after that date. All users who use CVS or CVSup to update the ports tree are encouraged to switch to portsnap(8) or for users which need more control over their ports collection checkout use Subversion directly.