Re: 2.1.1 release candidate 1
Eric Shubert <[email protected]> Fri, 03 Jan 2014 08:53:37 -0700
| Newsgroups | gmane.comp.security.ipcop.devel |
|---|---|
| Organization | Eric Shubert & Associates |
| Message-ID | <[email protected]> |
On 01/03/2014 02:35 AM, Olaf wrote: > >> Let me follow up. I see there's now a 2.1.1 iso, and it performs much >> better cpu-wise as a VM. I'm disappointed to see though that the virtio >> devices patch submitted last April does not appear to be in the release. >> Gilles indicated back then that he would integrate it. >> >> Here is the patch again, for your convenience. Is there any possibility >> of getting this included with this release? It would be very appropriate. > > The only VM patches I will apply are those that will remove features. > There is a simple reason for that, I think VMs and network security are > a poor match, so I am not about to support the combination. > > > Olaf > I'm sorry to hear this, and disappointed that you feel it necessary to impose your thoughts on the rest of the community. Perhaps someone on your team can convince you to act otherwise. Nobody's asking you to "support" virtio device drivers, only to allow them to be used, making IPCop more efficient in a VM implementation. These are simply a kernel device drivers, well supported by the linux kernel, much like the myriad of other kernel device drivers that you do include. There's nothing which presently prohibits IPCop from being implemented as a VM, and many people do so. I think you'd be hard pressed to find a way to prohibit this from being done. I won't discuss the merits and risks of using IPCop as a VM, and will allow other system administrators to evaluate those risks and benefits for themselves, and manage their situations accordingly. As I strongly believe in software freedom, I will be considering the options of using pfSense (which includes these drivers) in place of IPCop. I'll also consider creating a VM spin of IPCop that is better tailored to VM implementations. This would simplify the need to include so many hardware devices (which I might consider to be a security risk, FWIW). Thank you for your great work in the past. I would like to continue supporting IPCop in the future if it continues to be a good fit for my purpose. -- -Eric 'shubes' ------------------------------------------------------------------------------ Rapidly troubleshoot problems before they affect your business. Most IT organizations don't have a clear picture of how application performance affects their revenue. With AppDynamics, you get 100% visibility into your Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro! http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk