On 2014-09-08 05:33, Stuart Henderson wrote:
On 2014-09-06, Josh Grosse <j...@jggimi.homeip.net> wrote:
On Fri, Sep 05, 2014 at 01:36:36PM -0400, kbenjamin Coplon wrote:
I use vether because I followed this tutorial.
http://www.bsdnow.tv/tutorials/openbsd-router
is the tutorial wrong?

I would rather call this an example of how somebody set *their* router up,
rather than exactly a tutorial...

I don't have time to try switching the vr today, will report after I do.

thanks for the help :)

The tutorial uses vether(4) to bridge(4) the internally facing NICs
to the same subnet, and is not necessary if your internal LAN
has an Ethernet switch deployed.  If your infrastructure has a
switch, then the LAN can be reached from a single NIC, and neither a
bridge or vether driver is needed.

yes, though if the bridge *is* needed, then adding vether to it is a
reasonable way to assign an IP address that won't go away (whereas if the
bridge has physical interfaces only, and the address is on one of those
interfaces, it will go away when that interface is unplugged).

Excellent point.  I had not articulated the reason vether was
used with the bridge.  (I also made a grammatical error, for which I
apologize.  A typo was combined with my thinko.)

The tutorial also mentions mfs filesystems as a possibility for /var and
/tmp.  While mfs is still available, tmpfs filesystems were added at
OpenBSD 5.4 and we are currently in a transition period.  The mfs
filesystems will eventually be removed.

tmpfs still has some problems, I wouldn't use it as a general purpose
replacement for mfs yet.

Yes, my intent was to warn that mfs would eventually be replaced.

It also advises changing some sysctl which in some cases (like 1024
entry ifq) are questionable and have trade-offs, and in other cases
(increasing memory for buffer cache on a router) seem like a bad idea
to me.

This is important, kbenjamin, and something I missed in my reading
of the How-to.  As Stuart is an OpenBSD developer, his opinions should
be given significantly more weight than mine.
_______________________________________________
Openbsd-newbies mailing list
Openbsd-newbies@sfobug.theapt.org
http://mailman.theapt.org/listinfo/openbsd-newbies

Reply via email to