dragonfly – Jupiter Broadcasting

It’s HAMMER Time | BSD Now 53

chris — Thu, 04 Sep 2014 10:26:17 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

It’s our one year anniversary episode, and we’ll be talking with Reyk Floeter about the new OpenBSD webserver – why it was created and where it’s going. After that, we’ll show you the ins and outs of DragonFly’s HAMMER FS. Answers to viewer-submitted questions and the latest headlines, on a very special BSD Now – the place to B.. SD.

Thanks to:

Direct Download:

RSS Feeds:

– Show Notes: –

Headlines

FreeBSD foundation’s new IPSEC project

The FreeBSD foundation, along with Netgate, is sponsoring some new work on the IPSEC code
With bandwidth in the 10-40 gigabit per second range, the IPSEC stack needs to be brought up to modern standards in terms of encryption and performance
This new work will add AES-CTR and AES-GCM modes to FreeBSD’s implementation, borrowing some code from OpenBSD
The updated stack will also support AES-NI for hardware-based encryption speed ups
It’s expected to be completed by the end of September, and will also be in pfSense 2.2

NetBSD at Shimane Open Source Conference 2014

The Japanese NetBSD users group held a NetBSD booth at the Open Source Conference 2014 in Shimane on August 23
One of the developers has gathered a bunch of pictures from the event and wrote a fairly lengthy summary
They had NetBSD running on all sorts of devices, from Raspberry Pis to Sun Java Stations
Some visitors said that NetBSD had the most chaotic booth at the conference

pfSense 2.1.5 released

A new version of the pfSense 2.1 branch is out
Mostly a security-focused release, including three web UI fixes and the most recent OpenSSL fix (which FreeBSD has still not patched in -RELEASE after nearly a month)
It also includes many other bug fixes, check the blog post for the full list

Systems, Science and FreeBSD

Our friend George Neville-Neil gave a presentation at Microsoft Research
It’s mainly about using FreeBSD as a platform for research, inside and outside of universities
The talk describes the OS and its features, ports, developer community, documentation, who uses BSD and much more

Interview – Reyk Floeter – reyk@openbsd.org / @reykfloeter

OpenBSD’s HTTP daemon

Tutorial

A crash course on HAMMER FS

News Roundup

OpenBSD’s rcctl tool usage

OpenBSD recently got a new tool for managing /etc/rc.conf.local in -current
Similar to FreeBSD’s “sysrc” tool, it eliminates the need to manually edit rc.conf.local to enable or disable services
This blog post – from a BSD Now viewer – shows the typical usage of the new tool to alter the startup services
It won’t make it to 5.6, but will be in 5.7 (next May)

pfSense mini-roundup

We found five interesting pfSense articles throughout the week and wanted to quickly mention them
The first item in our pfSense mini-roundup details how you can stream Netflix to in non-US countries using a “smart” DNS service
The second post talks about setting ip IPv6, in particular if Comcast is your ISP
The third one features pfSense on Softpedia, a more mainstream tech site
The fourth post describes how to filter HTTPS traffic with Squid and pfSense
The last article describes setting up a VPN using the “tinc” daemon and pfSense
It seems to be lesser known, compared to things like OpenVPN or SSH tunnels, so it’s interesting to read about
This pfSense HQ website seems to have lots of other cool pfSense items, check it out

OpenBSD’s new buffer cache

OpenBSD has traditionally used the tried-and-true LRU algorithm for buffer cache, but it has a few problems
Ted Unangst has just switched to a new algorithm in -current, partially based on 2Q, and details some of his work
Initial tests show positive results in terms of cache responsiveness
Check the post for all the fine details

BSDTalk episode 244

Another new BSDTalk is up and, this time around, Will Backman interviews Ken Moore, the developer of the new BSD desktop environment
They discuss the history of development, differences between it and other DEs, lots of topics
If you’re more of a visual person, fear not, because…
We’ll have Ken on next week, including a full “virtual walkthrough” of Lumina and its applications

Feedback/Questions

All the tutorials are posted in their entirety at bsdnow.tv
We want to give a huge thank you to our viewer Toby for writing this week’s tutorial
Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
Watch live Wednesdays at 2:00PM Eastern (18:00 UTC)

The post It's HAMMER Time | BSD Now 53 first appeared on Jupiter Broadcasting.

The Gateway Drug | BSD Now 11

chris — Fri, 15 Nov 2013 10:35:21 +0000

We sit down to chat with Justin Sherrill of the DragonflyBSD project about their new 3.6 release. Later on, we\’ll be showing you a huge tutorial that\’s been baking for over a month – how to build an OpenBSD router that\’ll destroy any consumer router on the market! There\’s lots of news to get caught up on as well, so sit back and enjoy some BSD Now – the place to B.. SD.

Direct Download:

RSS Feeds:

– Show Notes: –

Headlines

OpenSSH 6.4 released

Security fixes in OpenSSH don\’t happen very often
6.4 fixes a memory corruption problem, no new features
If exploited, this vulnerability might permit code execution with the privileges of the authenticated user and may therefore allow bypassing restricted shell/command configurations.
Disabling AES-GCM in the server configuration is a workaround
Only affects 6.2 and 6.3 if compiled against a newer OpenSSL (so FreeBSD 9\’s base OpenSSL is unaffected, for example)
Full details here

Getting to know your portmgr-lurkers

Next entry in portmgr interview series
This time they chat with Mathieu Arnold, one of the portmgr-lurkers we mentioned previously
Lots of questions ranging from why he uses BSD to what he had for breakfast
Another one was since released, with Antoine Brodin aka antoine@

FUSE in OpenBSD

As we glossed over last week, FUSE was recently added to OpenBSD
Now the guys from the OpenBSD Journal have tracked down more information
This version is released under an ISC license
Should be in OpenBSD 5.5, released a little less than 6 months from now
Will finally enable things like SSHFS to work in OpenBSD

Automated submission of kernel panic reports

New tool from Colin Percival
Saves information about kernel panics and emails it to FreeBSD
Lets you review before sending so you can edit out any private info
Automatically encrypted before being sent
FreeBSD never kernel panics so this won\’t get much use

Interview – Justin Sherrill – justin@shiningsilence.com / @dragonflybsd

DragonflyBSD 3.6 and the Dragonfly Digest

Tutorial

Building an OpenBSD Router

Replace your crappy consumer router with a custom-built one
Uses the pf firewall and other built-in OpenBSD utilities
Very secure, built entirely on top of open source software
Puts YOU in control of your network

News Roundup

BSD router project 1.5 released

Nice timing for our router tutorial; TBRP is a FreeBSD distribution for installing on a router
It\’s an alternative to pfSense, but not nearly as well known or popular
New version is based on 9.2-RELEASE, includes lots of general updates and bugfixes
Fits on a 256MB Compact Flash/USB drive

Curve25519 now default key exchange

We mentioned in an earlier episode about a patch for curve25519
Now it\’s become the default for key exchange
Will probably make its way into OpenSSH 6.5, would\’ve been in 6.4 if we didn\’t have that security vulnerability
It\’s interesting to see all these big changes in cryptography in OpenBSD lately

FreeBSD kernel selection in boot menu

Adds a kernel selection menu to the beastie menu
List of kernels is taken from \’kernels\’ in loader.conf as a space or comma separated list of names to display (up to 9)
From our good buddy Devin Teske

PCBSD weekly digest

PCDM has officially replaced GDM as the default login manager
New ISO build scripts (we got a sneak preview last week)
Lots of bug fixes
Second set of 10-STABLE ISOs available with new artwork and much more

Theo de Raadt speaking at MUUG

Theo will be speaking at Manitoba UNIX User Group in Winnipeg
On Friday, Nov 15, 2013 at 5:30PM (see show notes for the address)
If you\’re watching the show live you have time to make plans, if you\’re watching the downloaded version it might be happening right now!
No agenda, but expect some OpenBSD discussion
We\’ll let you know if there is a recorded version.

Feedback/Questions

Dave writes in: https://slexy.org/view/s21YXhiLRB
James writes in: https://slexy.org/view/s215EjcgdM
Allen writes in (lol): https://slexy.org/view/s21mCP2ecL
Chess writes in: https://slexy.org/view/s207ePFrna
Frank writes in: https://slexy.org/view/s20iVFXJve

The very extensive written version of today\’s tutorial, with lots of extras we didn\’t mention, is posted on bsdnow.tv, as always – give it a read! There are sections about setting up the router to tunnel all (or specific parts of) your traffic through a VPN or Tor, how to make the router automatically check for updates and email them to you, and much more.
Send questions, comments, show ideas/topics, etc to feedback@bsdnow.tv
We don’t check YouTube comments, JB comments, Reddit, etc. If you want us to see it, send it via email (the preferred way) or Twitter (also acceptable)
Watch live Wednesdays at 2:00PM Eastern (19:00 UTC)

The post The Gateway Drug | BSD Now 11 first appeared on Jupiter Broadcasting.