B
Porting a userland application is much much simpler than a writing a kernel driver .
polyduekes
Fuse drivers != Native in kernel drivers LinuxKAPI != Linuxulator Fuse driver == A userland process Native driver == Runs Inside the kernel space
btw i showed you the erofs fuse post thinking you were talking about drivers in general, not only kernel drivers, my bad
nami
Anyone experimented with vfs.zfs.txg.timeout? Could increasing the value prolong lifespan of SSD drives?
polyduekes
https://www.youtube.com/watch?v=d66YD7ypM6A&list=PLugwS7L7NMXwhtfVdd3m2Ro0TV1XDzl3t&index=5 this looks cool
polyduekes
btw anyone has any idea how does savecore does an auto dump?
Neville
Neville
Don't know how accurate this is but I ran a speed test here in Japan. Using FreeBSD 15 with the latest AX 200 wifi drivers. Pretty good
polyduekes
can anyone with an amd system here verify if nm -S /boot/kernel/kernel includes page_offset_base symbol or not?
Neville
Not on this AMD system either
polyduekes
Not on this AMD system either
hmm, i see, thanks :)
Castle
Hi I have NVIDIA driver installed on my new FreeBSD system. Defining the driver in the .xorg makes the driver been ignored to be loaded inxi. Using same file using nv works, but has an unstable desktop which crashes any time ! Anyone has an idea?!?
polyduekes
is it possible to create a cronjob that runs dhclient ue0 everytime a usb tethering device is connected ?
K
For such a thing on Linux I would use udevd. Not sure of FreeBSD equivalent. Anyways cron is only aware of time, not devices. Unless you write a script or program that checks if a new usb tethering device has been connected and runs dhient consequently. But im sure there are proper ways to achieve that such as network managers
polyduekes
btw, what do you guys prefer between pf and ipfilter and why?
accelerat0r 🇮🇱 🇮🇱 🇮🇱
That will depend. In my case consistancy across machines. I have an openbsd/freebsd mix so pf is my choice. I will not be doing the same configs on different firewalls.
accelerat0r 🇮🇱 🇮🇱 🇮🇱
Other thab that I dont see to much
accelerat0r 🇮🇱 🇮🇱 🇮🇱
Both are great
polyduekes
i am going to go with PF as well now since the work on ipfilter seems to be stale for now https://forums.FreeBSD.org/threads/why-does-ipf-still-exist.97036/post-692366
polyduekes
i am going to go with PF as well now since the work on ipfilter seems to be stale for now https://forums.FreeBSD.org/threads/why-does-ipf-still-exist.97036/post-692366
I've done quite a bit to work out some of the niggling issues in IPFILTER. I've put IPFILTER work on pause for now as I work to import MIT KRB5 to replace Heimdal in base. There are a number of changes in yet to be completed git branches waiting for me to get back at them.
polyduekes
IPFW is not IPFILTER
🤔, in case you are being confused,cy@ is the maintainer of ipfilter
polyduekes
No
yes they are the maintainer of ipfilter, are you possibly having some issues with translations in case english isn't your first language
polyduekes
IPFW is not IPFILTER.
ok. but who and when is talking about ipfw or saying ipfw is ipfilter?
Artel
btw, what do you guys prefer between pf and ipfilter and why?
Oh, I misread. Who uses ipfilter lmao usually question is PF vs IPFW
accelerat0r 🇮🇱 🇮🇱 🇮🇱
I actually misread I thought U were talking about ipfw too 😂
polyduekes
Oh, I misread. Who uses ipfilter lmao usually question is PF vs IPFW
as per the maintainer of ipfilter, ipfilter is better then ipfw As to performance, IPF and PF perform better than IPFW when NAT is involved. Packets cross kernel userspace barrier and back again through NAT. IPFW NAT is inefficient. In that regard PF and IPFILTER are of similar design.
accelerat0r 🇮🇱 🇮🇱 🇮🇱
Still both pf and ipfw are quite similar
Artel
back when IPFW relied on natd now IPFW has kernel NAT
Artel
ipfilter hasnt get any new features since 90s, due to licensing issues
polyduekes
https://archive.ph/ogVam and even in 2018, peter wemm, the freebsd server admin was totally against using ipfw, so ipfw isn't an option for me
polyduekes
i don't want to take risks
B
I like PF .
Rincewind
I like to
Artel
https://archive.ph/ogVam and even in 2018, peter wemm, the freebsd server admin was totally against using ipfw, so ipfw isn't an option for me
IPFW has better performance when we talking about 10Gbps and more. PF is object oriented and ruleset gets really nasty when you have hundreds rules.
Artel
i don't want to take risks
Stop asking silly questions and fishing old forums. Try it yourself.
Artel
IPFW has better performance when we talking about 10Gbps and more. PF is object oriented and ruleset gets really nasty when you have hundreds rules.
thats why pfSense by-default does PF QUICK on every rule - to boost performance, instead of going checking packet for all rules
polyduekes
Stop asking silly questions and fishing old forums. Try it yourself.
i didn't asked any silly question, but subjective opinions about pf and ipfilter here and that forum post is from 4 march 2025
Artel
Yet PF has better syntax, and if it is your first firewall - start with PF
polyduekes
yeah, that's what i decided some hours ago after asking here, i am going to stick with pf for a long time now, it seems good, very actively maintained, nice performance and the maintainer has a lot of experience
Pouria
IPFW has better performance when we talking about 10Gbps and more. PF is object oriented and ruleset gets really nasty when you have hundreds rules.
I started with PF too. it has easier syntax. However, after I learned about IPFW, I have never gone back. It works perfectly, and I have much more customization with it. We have more than 1,000 rules utilizing In-kernel NAT, NAT64, skips, calls, and tables at the same time.
polyduekes
is there something wrong with my disk
polyduekes
it got auto detached during a file transfer
Rincewind
Maybe Media error
Mahdi
Hi, everyone Can anyone explain exactly what language the kernel and low-level softwares of the FreeBSD operating system are written in? Is the assembly used in the project GNU GAS or NASM? Or is it written directly with LLVM IR? Please explain because I want to try to optimize FreeBSD for specific hardware in the next few months. Thanks :)
Mahdi
And if they were built with GNU GAS, why did FreeBSD use the GNU project's assembler, even though it has tried very hard to separate itself from the GNU project?
Gowen
https://docs.freebsd.org/en/books/developers-handbook/book/#x86
Gowen
You should read the Developer's Handbook. Chapter 11 explains that.
Gowen
It uses the full LLVM ecosystem, including llvm-as
Artel
is there something wrong with my disk
Faulty cable And/or dying drive and its controller dying
Artel
check smartctl -x /dev/ada0
polyduekes
check smartctl -x /dev/ada0
i have done smart checks(including vendor self health test) many times and they return ok,and the issue only happens when i am copying something from a ftp server to an ntfs partition
accelerat0r 🇮🇱 🇮🇱 🇮🇱
Mostly faulty cable
Mahdi
How out of that optimization are U trying to get from that?
I didn't understand what you meant.
Artel
no gnu gassy
polyduekes
Mostly faulty cable
doesn't seem to be the case here, i tried using the same cable with different drive with ufs partition and when i copy something from an ftp server to that ufs partition, it works fine
Mahdi
So what exactly are you using at a low level? Is llvm a programming language?
Mahdi
So I have to learn the intermediate language llvm?
Artel
BSD UNIX uses C programming language, compiled with llvm
Mahdi
llvm is not lang
yeah, it's created for compilers and etc right?
Mahdi
Every operating system needs to use assembly, right?
Mahdi
Is it possible to build an entire operating system in C language without using assembly?
polyduekes
Is it possible to build an entire operating system in C language without using assembly?
if you want take a look at the few assembly code for example then i would recommend checking the /sys/amd64/amd64/ dir in the src, it has some asm code, not sure which asm it is though but you might figure that out
Mahdi
thanks for your helps :)
polyduekes
anyone knows when the xorg-server 21.1.16 security update will arrive in quarterly branch?
Maxim
they might have mistaken you for a bot; contact them directly and ask questions