|
OpenBSD General Other questions regarding OpenBSD which do not fit in any of the categories below. |
|
Thread Tools | Display Modes |
|
|||
openbsd server optimization
Hi again.
How can I optimize the server for performance? What files? How can I check the server for heavy loads? Thanks. |
|
|||
Although you didn't say whether you had already set up your server, or whether this is all hypothetical, the OpenBSD project doesn't advocate a lot of knob turning. So in response, what have you set up, & how are you measuring performance? What hardware is being used? Supply dmesg(8) output.
In general, no tweaking should be necessary. |
|
|||
Static content apache server
www.rootbsd.com
vps package. Can you recommend good vps hosting? I will use apache and not nginx because apache is with base system. for a moderate vps, how many people can surf the site together? How can I check it with ab ? How much RAM will I need? Is there an openbsd checklist before going online? -------------------------- What PF rules is it important to use? Thanks again. |
|
||||
Quote:
Quote:
Quote:
Code:
0. Study the documentation. 1. Think! Quote:
|
|
|||||||
OK.
Quote:
Quote:
Quote:
Code:
Install notice: This is the official httpd distributed by the Apache Server Project, provided as a port for those who, for various reasons, need to run version 2. OpenBSD provides a custom Apache server, httpd(8), in the base system which has been audited for security and may run in a chroot(2) environment. Users are STRONGLY encouraged to use the system httpd rather than this port. Quote:
Quote:
Any specific recommendations will require further information on your specific needs. Quote:
Quote:
|
|
|||
I didn't know nginx is on the base system.
I remember reading that people want it. maybe on old forum post. Good news! Does running drupal site consume much more resources then normal static pages? What about security with CMS systems? Will I loose the openbsd protection? I don't have the knowledge of running a server online with many people using it. |
|
||||
Quote:
Quote:
Quote:
I recommend you think about application security and OS security as separate functions. Quote:
Start at the beginning. What service do you want to provide? |
|
|||
This is why I choose openbsd, out of the box it is ready to go.
I heard that drupal is considered to be a bad security system. Can you recommend another system? I know that attacks will come above the base system applications. Using drupal site will be much more heavy on RAM and a security risk. Using a simple nginx with static content is much better for starters. |
|
|||
Serving static content.
like openbsd.org without the search window (dynamic). simple , fast, secure. |
|
||||
1. Configure a test server.
2. As specific questions about your test server arise, ask. 3. When you have an environment you understand and can manage locally, practice managing it as if it were physically remote. 4. Once you are comfortable with remote operation and management, then you may contact your VPS vendors, ask them specific questions, and choose between them. |
|
|||
I think all I need is some PF rules.
Maybe some nginx performance issues also. |
|
|||
At their best, pf(4) rules need to be written to the specifics of the network in place. You will be placing yourself into a better position if you learn how to write them yourself. The best sources of information are:
Quote:
|
|
|||
links
http://geodsoft.com/howto/harden/
--------- 10 Security Steps Contents http://geodsoft.com/howto/secten/ --------- CHECK LIST http://geodsoft.com/howto/harden/OpenBSD/checklist.htm - Last edited by barti; 30th July 2012 at 02:20 PM. |
|
||||
Third party guides and "how to" documents of all kinds are frowned upon by the OpenBSD Project. They are frequently out-of-date, often incorrect, if correct only applicable to a subset of user environments, and often written by justifiably proud newbies who may not understand the implications or limitations of what they have written.
In this case, you are referencing a guide that is more than 11 years old. Here is a recent misc@ thread about another third party site which is very popular among newbies for OpenBSD "optimization" guidance. The thread begins here, and goes a very long way: http://marc.info/?l=openbsd-misc&m=134327905918091&w=2 Last edited by jggimi; 30th July 2012 at 02:37 PM. Reason: clarity, fixed link |
|
|||
I think this is true, but still there is some valuable theoretical information.
|
|
||||
Yet misinformation is still in active use, and wasting developers' time to handle questions from misled users.
See this post in the thread mentioned above. http://marc.info/?l=openbsd-misc&m=134329119021374&w=2 Sometimes, I feel like this: |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
ssh server on OpenBSD | MarinosK | OpenBSD General | 4 | 16th February 2011 07:38 PM |
How to build a OpenBSD server? | fender0107401 | OpenBSD Installation and Upgrading | 6 | 15th October 2010 07:11 PM |
Openbsd x terminal server | wyginwys | OpenBSD General | 2 | 9th June 2010 12:11 PM |
OpenBSD Xterminal Server | jjjustjjjay | OpenBSD General | 0 | 17th April 2010 12:46 PM |
FreeBSD Kernel Optimization | komodo | FreeBSD General | 5 | 22nd June 2009 07:15 AM |