On Tue, Jan 12, 2010 at 10:41:15AM +0200, Ciprian Dorin, Craciun wrote:
>     * any other options??? (anyone???)

If you are looking at OpenBSD in a production environment as
a firewall, ssl accelerator, or for protection from OS privilege
escalation when someone else finds and uses an exploit in your apps,
run it on bare metal.

If you are looking at virtualization to maximize hardware utilization,
look at the operating systems officially supported by the virtualization
software you choose.

If you are looking at Xen for virtualization because paravirtualization
might give a lower impact on performance, I would suggest checking
the performance impact between paravirtualization and VT extension
assisted virtualization on real workloads.

But look on the bright side... odds are whatever you are trying to
do is probably so full of holes at the application layer even with
all of OpenBSD's protections you'll still get sufficiently maliciously
pwned through several application exploits.
-- 
Chris Dukes

Reply via email to