I have two LDAP boxes running in multi-master configuration (I had to recompile 
it to get ACIs, wish that was a package option) for the root of the directory 
tree, it holds user/access information as well as the kerberos database, and 
network topology and state information (what mac is connected to what, 
interface names and descriptions, mapping rules) and documentation. There are 
two other BSD boxes that serve as collectors/pollers with collectd for servers 
and my own SNMP poller that stores volatile information (interface utilization 
every X minutes, etc) in an SQL database and not-so-volatile information in the 
LDAP tree. All of this is stored on an ATA over Ethernet box that the root and 
collector/poller boxes mount over le network. Then this setup is replicated in 
various network segments (LDAP partitioning, separate SQL databases) and merged 
periodically to give a consistent picture of what the network is doing. I have 
some cheap $400 supermicro 1U
 boxes that take care of everything, it works out nicely when you spread the 
load out on multiple servers. Then it's all backed up periodically with a 
custom version of git to create diff'd snapshots of the entire system 
(excluding database information, which is backed up separately). Then I manage 
it using a QT frontend that I wrote to control all the various subsystems in a 
more user friendly way, so maintaining a changing network is easy, no more 
loose scripts everywhere.

Whew, what a project, but worth it.
Thanks,
Brian



________________________________
 From: Tomas Bodzar <tomas.bod...@gmail.com>
To: Brian Empson <brian_emp...@yahoo.com> 
Cc: "misc@openbsd.org" <misc@openbsd.org> 
Sent: Sunday, October 14, 2012 2:52 AM
Subject: Re: OpenBSD rocks
 
On Sat, Oct 13, 2012 at 10:02 PM, Brian Empson <brian_emp...@yahoo.com>
wrote:
> Hello all,
>
> I've been trying out different BSDs and Linux distros over the past few
weeks for a project, and hands down I like OpenBSD the best. I can't believe
I'd never tried it before, I like the lack of bloat that you basically have to
live with in a Linux system. Less problems getting it installed too.

Would you mind to share for which project you want to use OpenBSD?
It's always good to know real world examples :-)

>
> Nice job OpenBSD team! Keep up the awesome job!
>
> Brian

Reply via email to