Speaker:

Daniel Hartmeier

Title for the presentation:

Design and Performance of the OpenBSD Stateful Packet Filter (pf)

Abstract

Since three releases, OpenBSD includes a new stateful packet filter called pf. While its functionality is similar to its predecessor, Darren Reed's IP Filter, it has been designed and implemented from scratch. This talk introduces aspects of the new implementation and presents the results of a comparative benchmark done with the first release in 2002, explaining the most important changes since the initial release and giving a summary of the most recent developments and an outlook on the future of pf.

Homepage: http://www.benzedrine.cx/pf.html

Required knowledge

Basic knowledge of TCP/IP, some experience with (any) packet filter, and knowledge of the difference between stateful vs. stateless filtering is recommended.

About the speaker

Daniel Hartmeier is 28, lives in Switzerland, and is an OpenBSD developer since 2001. He's one of the authors of pf.

Slides from the presentation:

Can be found here

Online webcast:

Can be found at http://linuxforum.mmmanager.net