Re: FreeBSD Security Advisory FreeBSD-SA-02:21.tcpip

From: Benjamin Krueger (benjamin@macguire.net)
Date: 04/19/02


Date: Thu, 18 Apr 2002 18:08:46 -0700
From: Benjamin Krueger <benjamin@macguire.net>
To: Nate Williams <nate@yogotech.com>


* Nate Williams (nate@yogotech.com) [020418 18:03]:
> > FreeBSD currently does not enable easy maintainance between critical release
> > points for large server environments. Using cvsup to maintain source builds
> > for environments like these ( say 400 servers or more ) is not only
> > unacceptable without an on staff developer and release engineer, it is
> > infeasible.
> >
> > For those of you who would be quick to note that "Corporations with
> > 400 servers should be able to afford a developer and release engineer"
> > please note that 400 NT, Solaris, AIX, or HP-UX servers can be
> > maintained by a small team of administrators, and do not require these
> > extra resources.
>
> So, for 400 NT, Solaris, AIX, or HP-UX servers you allow a small team,
> and for FreeBSD you don't even allow a single engineer? Seems kind of a
> double standard.
>
> And as a long-time administrator, I disagree that FreeBSD is more
> difficult to maintain releases across systems. I've done Ultrix, SunOS,
> Solaris, FreeBSD, and (ack!) Linux, and I find that FreeBSD is second to
> Solaris, but barely so.
>
> However, Solaris doesn't even provide anything remotely close to what
> Brett is asking, and they're getting paid alot for the OS than FreeBSD
> is getting paid.
>
> Nate

I think you misunderstood. I meant you don't need release engineers for
any of the above, only FreeBSD. FreeBSD might be great, but it doesn't admin
itself yet. ;) Consider 4 sysadmins, and 2 release engineers for FreeBSD, as
opposed to just 4 sysadmins for NT / Solaris / AIX / HP-UX.

-- 
Benjamin Krueger
"Life is far too important a thing ever to talk seriously about."
- Oscar Wilde (1854 - 1900)
----------------------------------------------------------------
Send mail w/ subject 'send public key' or query for (0x251A4B18)
Fingerprint = A642 F299 C1C1 C828 F186  A851 CFF0 7711 251A 4B18
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message


Relevant Pages

  • Servers Crash every few days
    ... I have six servers running FreeBSD 6.2 and all of them have the same config. ... Memory for the servers are ... 1000 connection and sometimes when the connections is more 10000. ...
    (freebsd-questions)
  • Re: Windows client - internet connection sharing
    ... >> ADSL line to provide internet access via LAN to a ... > This is all about how you interface your FreeBSD ... > servers and so forth. ... This enables you to set up a 'DMZ' network, ...
    (freebsd-questions)
  • Re: trouble with a script
    ... Your snippet of code doesn't look like sh on FreeBSD. ... Basically, I want my script to prompt me for two inputs, then append to ... The user input would be "domain.com", ... is how we set up a client's site on our servers. ...
    (comp.unix.shell)
  • Re: FreeBSD Security Advisory FreeBSD-SA-02:21.tcpip
    ... > most freebsd admins with larger installations do. ... Doing this for 1000 individual servers, even when scripted, is ... money on good hardware and support contracts because they have gaurantees and ... Yes, FreeBSD does run on darn cheap hardware, and it runs well. ...
    (FreeBSD-Security)
  • Re: trouble with a script
    ... Your snippet of code doesn't look like sh on FreeBSD. ... Basically, I want my script to prompt me for two inputs, then append to ... The user input would be "domain.com", ... is how we set up a client's site on our servers. ...
    (comp.unix.shell)