Podcast Episode Details
Back to Podcast Episodes
95: Bitrot Group Therapy
This time on the show, we'll be talking some ZFS with Sean Chittenden. He's been using it on FreeBSD at Groupon, and has some interesting stories about how it's saved his data. Answers to your emails and all of this week's headlines, on BSD Now - the place to B.. SD.
This episode was brought to you by
Headlines
More BSDCan 2015 videos
- Almost as if we said it would happen last week, more BSD-related presentation videos have been uploaded
- Alexander Motin, Feature-rich and fast SCSI target with CTL and ZFS
- Daichi Goto, FreeBSD for High Density Servers
- Ken Moore, Lumina-DE
- Kevin Bowling, FreeBSD Operations at Limelight Networks
- Maciej Pasternacki, Jetpack, a container runtime for FreeBSD
- Ray Percival, Networking with OpenBSD in a virtualized environment
- Reyk Floeter, Introducing OpenBSD's new httpd
- Still more to come, hopefully ***
OpenBSD httpd rewrite support
- One of the most-requested features of OpenBSD's new HTTP daemon (in fact, you can hear someone asking about it in the video just above) is rewrite support
- There were concerns about regex code being too complicated and potentially allowing another attack surface, so that was out
- Instead, Reyk ported over an implementation of lua pattern matching while on the flight back from BSDCan, turning it into a C API without the lua bindings
- In the mailing list post, he shows an example of how to use it for redirects and provides the diff if you'd like to give it a try now
- It's since been committed to -current, so you can try it out with a snapshot too ***
SSH 2FA on FreeBSD
- We've discussed different ways to lock down SSH access to your BSD boxes before - use keys instead of passwords, whitelist IPs, or even use two-factor authentication
- This article serves as a sort of "roundup" on different methods to set up two-factor authentication on FreeBSD
- It touches on key pairs with a server-side password, google authenticator and a few other variations
- While the article is focused on FreeBSD, a lot of it can be easily applied to the others too
- OpenSSH has a great security record, but two-factor authentication is always a good thing to have for the most important
Published on 10 years, 6 months ago