m11r

6 ms·

1.
by m11r 7y ago
TRIM has been available in FreeBSD for mounted ZFS filesystems for quite a while, since ~Sep 2012 in 10-CURRENT[1]. I believe this is just a user space command for manually TRIM'ing in cases where it doesn't have explicit filesyst
2.
by m11r 7y ago
Out of curiosity, does this mean that they’re using (or have used) FreeBSD in their infrastructure or for some other purpose, or just a high level of Unix competence in that team? Any interesting details that you’re able to share?
3.
by m11r 7y ago
For nginx, versions 1.16.1+ and 1.17.3+ from upstream fix at least three of the vulnerabilities (CVE-2019-9511, CVE-2019-9513, CVE-2019-9516), however if you use a version provided by a distribution’s repositories (e.g., nginx 1.16 includ
4.
by m11r 7y ago
I was going to mention kernel TLS hopefully enabling sendfile for mostly-HTTPS workloads, as that’s the direction everything is heading anyway, and without it we don’t get zero-copy for those connections. Now I’m more curious about the actu
5.
by m11r 7y ago
That’s a good point; I never looked at what the perf impact of disabling sendfile would be on even a moderately-loaded webserver. It’d be really nice to see that fixed like the recent DIRECT_IO additions.
6.
by m11r 7y ago
Out of curiosity, what did you happen to move to (and why)? Back to ext4/xfs, or to Btrfs or something else more involved?
7.
by m11r 7y ago
That comment was written in 2007 when the original suggestion would have been somewhat more acceptable. In 2019, please do not use plaintext FTP for anything at all if you can help it, especially for a setup involving personal documents o
8.
by m11r 7y ago
I think it’s probably because for server usage, RHEL/CentOS is used significantly more than Fedora (with its shorter supported lifecycle), and Fedora is essentially the upstream for shakeout testing prior to inclusion in RHEL/Cent
9.
by m11r 7y ago
Most Linux images deployed on cloud providers I’ve seen don’t even have swap by default… it’s up to the user to add swap if necessary. I haven’t seen any installers default to encrypted swap, however.
10.
by m11r 7y ago
Keep in mind that this article is specifically discussing defaults , though, not necessarily the overall potential for security hardening. There are certainly some security-related features FreeBSD is missing when compared to other BSDs (O
11.
by m11r 7y ago
That’s true, although the requirements for different clearance levels are drastically different, and most people don’t refer to the standard background (re-)investigation process as a “lie detector,” even if the investigators are in fact at
12.
by m11r 7y ago
No they don’t. Certain types of clearances for DoD or the Intelligence Community may require polygraph along with the background investigation process, but the vast majority of cleared US government or contractor personnel do not have to
13.
by m11r 8y ago
Pretty sure it's still UFS+J. They've mentioned in the past that the benefits of ZFS don't really apply to the CDN boxes: if a drive dies, it's simply removed from the local cache, and files are re-downloaded/redist
14.
by m11r 8y ago
The reason Netflix would potentially wait for a proximate AWS datacenter is because all of their apps, backend services, and interface UIs are served from EC2 instances; all of the actual content delivery is in fact handled by their FreeBSD
15.
TCP CUBIC Broken in FreeBSD 12.0(lists.freebsd.org)
4 points by m11r 8y ago|0 comments
16.
by m11r 9y ago
Yes, that's correct. Recent macOS (nee OS X) versions: - Mavericks (10.9.x) - Yosemite (10.10.x) - El Capitan (10.11.x) - Sierra (10.12.x) - High Sierra (10.13.x)
17.
by m11r 9y ago
Out of curiosity, do you use host networking for higher performance (latency, conn/s, etc.) on those containers, or use the default docker-proxy forwarding?
18.
Linux Load Averages: Solving the Mystery(brendangregg.com)
3 points by m11r 9y ago|0 comments
19.
by m11r 12y ago
This is something I was wondering, too. Using nginx, I can easily top 50,000 req/s (45Mbit/s) on smaller, static/cached content, using 4 cores and < 1GB RAM.