Hacker News Reader

Comment by kitotik | Hacker News Reader

I’ve dabbled with OpenBSD and FreeBSD for personal projects for a long time, but have never had the opportunity to use them for anything “serious”. I am trying hard to figure out a path to change this.

ZFS, Jails, VNET, and the stellar security track record are very enticing. In-kernel wireguard support was the last missing piece for me.

The elegance and simplicity of the BSDs are becoming increasingly apparent in contrast to the Linux world.

As an example, compare the jails UX to say, LXC/LXD…

View on HN

I got a chance to use FreeBSD in such 'serious' case:

https://vermaden.wordpress.com/2019/06/19/freebsd-enterprise...

... I recently added Jails there with Minio inside in each of those jails to serve S3 storage.

Works like a charm.

Very comprehensive write-up. Thank you.

Thanks.

I used to chase bleeding edge Linux distros but these days, I nearly always reach for either an LTS release or a BSD for my personal projects.

Sadly, I got all my network appliances setup and configured with Ubuntu 20.04 LTS a month or so before OpenBSD merged their WireGuard kernel module. I'm too lazy to touch those servers given they're relatively low traffic, especially during Pandemic times as I'm always on my local network.

Why is in-kernel Wireguard a priority? I'm happily using https://github.com/WireGuard/wireguard-go with no issues to speak of, on FreeBSD.

In my experience using the userspace daemon on both BSD and macOS there was increased cpu overhead and slightly higher network latency compared to Linux with a module or built in.

Ah, perhaps. I haven't measured it; I only use FreeBSD on "applicance-ish devices," i.e. my router and NAS, both of which are pretty overspecced for CPU.

I need to try OpenBSD again, I always got an issue where the screen would hang after X amount of time and couldn't figure it out.

On the off-chance you were using amdgpu, they merged a huge driver update in 6.8 that improved reliability for me from "unusable" to "easy daily driver."

Reply on news.ycombinator.com