The Technical BSD Conference University of Ottawa Ottawa 2014-05-13 2014-05-18 6 Final 09:00 00:15 17:00 06:15 Royal Oak Pub goat BOF other en This is a BOF. About goats. Allan Jude Dan Langille Michael W. Lucas Twitter announcement Google Map to Royal Oak on Laurier St 09:00 03:00 Montpetit 201 How to get rid of legacy Tutorial workshop en With the IPv4 depletion closer and closer, there is a rising need to be able to work with IPv6 in our everyday life. This tutorial aims at putting the audience with their hands on the new protocol, creating a test network and managing applications running on top of it. The tutorial is divided in small theory sessions, and a series of hands-on sessions right after them, where lessons learned will be applied in a real life environment. NOTE: this tutorial requires use of a VM which attendees must install themselves before arriving at the tutorials. Details will be mailed out before the tutorial. We all know that IPv4 is running out faster than we could ever predict, and everybody should start getting acquainted with IPv6, a protocol ? or better a suite of protocols ? that has been available and usable for more than ten years but never got the right level of audience. Being ahead of the majority of the people will give those who were smart enough a lead over those that underestimated the ?threat?. This tutorial is intended for people wanting to get a greater grasp on the technology and implications of running IPv6, and will be presented along with a series of lab session to get running in this somewhat new world. There will be an introduction shedding light on key concepts and features, preparing the attendees for the rest of the session, focusing on putting hands on an IPv6-only network and connecting it to the world at large. Focus will be on a hands-on approach, where the participant is requested to act and work on configuring services over a real network after a brief theoretical introduction to highlight key concepts. Topics of the tutorial include IPv6 subnetting, protocol implementation for different common internet services like www, mail, dns, along with digressions over routing protocols and implementations such as DS-LITE and NATx4 At the end of the session, participants should be able to set up an IPv6-enabled network with no hassle, and with the required know-how to migrate services to the new protocol, transition mechanisms and procedures, and everything else needed. The tutorial is supported by a remote lab where every participant will be given a series of virtual machines to configure following the topics presented in the theory sessions, and will also have to relate to others to complete the required exercises, like setting up web services and interacting with other groups to test their communication on the live internet. Every participant will also be given a three week period over which the virtual machines will still work, so that he can keep on trying out IPv6 to strengthen key concepts outside of the class. Massimiliano Stucchi 13:00 03:00 Montpetit 201 Sane networking, matching your needs Tutorial workshop en This session is aimed at experienced or aspiring network administrators who want to expand their knowledge of PF, the OpenBSD packet filter, and related tools. A basic knowledge of Unix and TCP/IP network configuration is expected and required. The session will provide updates on the new PF syntax and features introduced in OpenBSD 4.7 (with samples presented in the old and new syntax where appropriate), with newer updates and previews of relevant new features such as the new traffic shaping system in the upcoming OpenBSD 5.5 release (planned release date May 1st). Topics potentially covered include * Configuration on OpenBSD, FreeBSD and NetBSD * PF ruleset basics and rule interactions: block, pass, match * Writing maintainable rulesets * Address families: IPv4 NAT vs IPv6 * Redirection, divert and services with odd dependencies (ftp-proxy, spamd) * Adaptive rulesets (state tracking tricks) * Traffic shaping with priorities and 'newqueue', OpenBSD 5.5 style * Legacy ALTQ traffic shaping * Per user filtering with authpf * High availability with CARP, relayd * Wireless vs wired networks * Filtering bridges * Logging and monitoring - pflog, pflow and others * Testing, debugging, and optimizing your configuration The session will provide updates on the new PF syntax and features introduced in OpenBSD 4.7 (with samples presented in the old and new syntax where appropriate), with newer updates and previews of relevant new features such as the new traffic shaping subsystem in the upcoming OpenBSD 5.5 release (planned release date May 1st). The available material (notes and slides) covers significantly more than the schedule allows for. To help make the session more targeted to your needs, I would appreciate if you, when you sign up for the session or soon after, send me an email to tutorial@bsdly.net description of what you would like to learn in this session, and to the extent you are allowed and feel it is appropriate, what your near or longer term future OpenBSD project is. Slides matching the latest version of the tutorial can be found at <a href="http://home.nuug.no/~peter/pf/newest/">http://home.nuug.no/~peter/pf/newest/</a>; updated slides will be made available to the general public after the present session has concluded. Timing and logistics allowing, copies of the third edition of Hansteen's The Book of PF will be available to purchase at the session. (Also see <a href="http://nostarch.com/pf2.htm">The Book of PF, 2nd edition</a>, No Starch Press November 2010). Peter Hansteen Newest presentation slides Peter N. M. Hansteen's blog The Book of PF, third edition 18:00 04:00 Morisset 211 Doc Sprints BOF meeting en This doc sprint is open to both committers and anyone interested in helping to improve the documentation set (handbook, guides, man pages, website) for any of the BSD projects. This doc sprint is open to both committers and anyone interested in helping to improve the documentation set (handbook, guides, man pages, website) for any of the BSD projects. FreeBSD committers will be available to assist non-committers in getting started with the FreeBSD documentation set, learning the workflow and how to make changes, and to approve and commit patches. Committers will also work on closing doc PRs and discuss proposed changes to the documentation. Feel free to drop by and help out! Dru Lavigne 20:00 04:00 Hacker Lounge - L140 meet, greet, hack Social other en The hacker lounge is on the ground floor of residence. Bring your laptop, enjoy. This room is located just past the lobby. You may need to ask for the key at the desk. Proper behaviour is expected, or you'll be asked to leave. :) If you must ask what proper behaviour is, well, it sounds like you shouldn't be there. The starting time is flexible, so is the ending time. Just show up. wifi will be available. In order to play nicely with others, please bring an extension cord / power strip. Please keep this room tidy and clean. 09:00 03:00 Montpetit 201 Transition from earlier OpenBSD releases or other Unix-like systems Tutorial workshop en OpenBSD has been the source of a number of BSD innovations over the years, including but not limited to PF (the OpenBSD packet filter, now including a new traffic shaping engine), significantly improved IPSEC tools, OpenSSH (the free Secure Shell server and client), security enhancements including preemtive exploit mitigation, and various other advances of the art and engineering in various parts of the system. This session intends to help you tackle the transition to the newest OpenBSD release from earlier releases or even coming from other Unix-like systems, highlighting enhancements in the new release and how to avoid any pitfalls that may turn up during the process. OpenBSD has been the source of a number of BSD innovations over the years, including but not limited to PF (the OpenBSD packet filter, now including a new traffic shaping engine), significantly improved IPSEC tools, OpenSSH (the free Secure Shell server and client), security enhancements including preemtive exploit mitigation, and various other advances of the art and engineering in various parts of the system. At the time of writing (mid-January 2014) the big news items for OpenBSD 5.5 seem to be the new traffic shaping system and the automated installer, but it's not set in stone yet and every release has enhancements that may not be immediately obvious until you start using the system. This session intends to help you tackle the transition to the newest OpenBSD release, highlighting enhancements in the new release and how to avoid any pitfalls that may turn up during the process. The intended audience or attendee profile is anybody who is considering making the jump to OpenBSD 5.5. You may be considering moving your systems wholly or partly to the new release from an earlier OpenBSD release or to move specific parts of your operation from a different Unix-like operating system to OpenBSD. To help make the session more targeted to your specific interests and needs, I would appreciate if, when you sign up for the session or soon after, send me an email to transition@bsdly.net with a brief description of what you would like to learn in this session, and to the extent you are allowed and feel it is appropriate, what your near or longer term future OpenBSD project is. Peter Hansteen Peter N. M. Hansteen's blog Slides for this talk 13:00 03:00 Montpetit 201 You're doing it wrong Tutorial workshop en Sudo is one of the most widely deployed system security tools. It's also widely misunderstood and frequently misapplied. This tutorial takes you through the proper application of sudo, its strengths and weaknesses, and how it can be used and abused. Based on the book "Sudo Mastery." Unix-like operating systems use a rudimentary access control system: the root account can do anything, while other users are peasants with only minimal access. This worked fine in UNIX’s youth, but today, system administration responsibilities are spread among many people and applications. Each person needs a tiny slice of root’s power. Sudo lets you divide root’s monolithic power between the people who need it with accountability and auditability. This course will teach you to: * design a sudo policy rather than slap rules together * simplify policies with lists and aliases * use non-Unix information sources in policies * configure alternate sudo policies * manage shell environments * verify system integrity and perform intrusion detection * have a common sudo policy across your server farm * manage sudo policies via LDAP * log and debug sudo * log and replay full sudo sessions * use authentication systems other than passwords Michael W. Lucas 19:00 03:00 Montpetit 202 Doc Sprints BOF meeting en This doc sprint is open to both committers and anyone interested in helping to improve the documentation set (handbook, guides, man pages, website) for any of the BSD projects. This doc sprint is open to both committers and anyone interested in helping to improve the documentation set (handbook, guides, man pages, website) for any of the BSD projects. FreeBSD committers will be available to assist non-committers in getting started with the FreeBSD documentation set, learning the workflow and how to make changes, and to approve and commit patches. Committers will also work on closing doc PRs and discuss proposed changes to the documentation. Feel free to drop by and help out! Dru Lavigne 19:00 03:00 Morisset 211 BOF meeting en The Ottawa Puppet Users Group is holding their next meeting at PGCon 2014. If you use Puppet, or would like to learn more, this is your opportunity. Don't miss this chance to mix and mingle with fellow Puppeteers and maybe even snag yourself some Puppet Labs swag! Kenn Hussey Ottawa Puppet Users Group Puppet Labs Puppet (Wikipedia) 15:00 04:00 Royal Oak Pub register Pick up your registration pack, have a beer! other en Registration pick up Avoid the line ups of the first day! Pick up your registration pack early, at the pub. Sit back. Have a drink, some food. Enjoy the company. A BSDCan tradition. :) The map is linked to from the home page. 20:00 05:00 Hacker Lounge - L140 meet, greet, hack Social other en The hacker lounge is on the ground floor of residence. Bring your laptop, enjoy. This room is located just past the lobby. You may need to ask for the key at the desk. Proper behaviour is expected, or you'll be asked to leave. :) If you must ask what proper behaviour is, well, it sounds like you shouldn't be there. The starting time is flexible, so is the ending time. Just show up. wifi will be available. In order to play nicely with others, please bring an extension cord / power strip. Please keep this room tidy and clean. 10:00 01:00 Montpetit 201 Using ZFS Metadata to enhance timeline analysis and detect forged timestamps. Security lecture en Exploring the use of the internal data structures of ZFS to provide extra sources of data for forensic timeline analysis. Several techniques to detect falsified timestamps on ZFS filesystems are demonstrated. During forensic analysis of disks, it may be desirable to construct an account of events over time, including when files were created, modified, accessed and deleted. "Timeline analysis" is the process of collating this data, using file timestamps from the file system and other sources such as log files and internal file metadata. ZFS uses a complex structure to store file data and metadata and the many internal structures of ZFS are another source of timeline information. This internal metadata can also be used to detect timestamps which have been tampered with by the touch command or by changing the system clock. This presentation will discuss the internal data structures of ZFS, present new research illustrating how ZFS metadata changes over time, and demonstrate how this data can be used to detect falsified file timestamps. Dylan Leigh http://research.dylanleigh.net 11:30 01:00 Montpetit 201 Embedded lecture en My work on the Octeon port made possible for OpenBSD to run on the D-Link DSR line of mid-range routers and also improved all supported models through the drivers I wrote for the hardware random number generator and the real-time clock. I'm continuing my work on improving the OpenBSD experience on the DSR products by adding support for the CF card in particular and the USB stack in general. This presentation summarizes the developments I brought and the obstacles I faced. OpenBSD/octeon began in 2010 with an SDK created by IIJ and donated to OpenBSD. Portwell CAM-0100 becoming self-hosting in April 2013. Support for EdgeRouter LITE Ethernet was added in September 2013, allowing the EdgeRouter LITE to be usable by NFS booting. Somewhere around mid-2013 someone kindly donated me an unsupported Octeon-based DSR-500 from D-Link. By October 2013 the machine was usable through NFS boot. Since then I started improving the port by adding new drivers like octrng(4) and octrtc(4), working on supporting the CF card found on the DSR models and towards adding generic USB support. Lack of proper hardware documentation and a crippled SDK license are slowing down the porting process and don't allow for the creation of sound and robust device drivers. Paul Irofti 12:30 01:00 Montpetit 201 mips lunch time BOF BOF meeting en Lunch session with hands on bring up of a Mips74k commercial router. pointers to how to construct a FreeBSD image, flashing images to routers, recovery upon failure, netbooting for initial bring up, and using qemu to build pkgng style packages. Sean Bruno 13:30 01:00 Montpetit 201 a year in the life System Administration lecture en The results of using BGP for realtime import and export of spam whitelist/blacklist entries In early 2013, I introduced a new method to distribute spam whitelist/blacklist entries. Now, I am able to present the results of 1 year of usage. In the battle against Spam, many mail server admins collect and distribute IP addresses of systems that send them Spam. However, distribution of these lists are traditionally limited to 2 methods. * is periodically downloading this list from a source, usually a web server often causing massive load and slowness at the top of the hour. * is a real-time lookup against an external provider (such as dns-rbls) so your response time is dependent on how fast they respond or timeout. This talk discusses a 3rd solution: using BGP to distribute the IP addresses in a real-time manner. Peter Hessler video 15:00 01:00 Montpetit 201 Design, Implementation, Lessons learned Hacking lecture en The Border Gateway Protocol, BGP, is used on the internet between ISPs to announce reachability of networks. Routers build their routing tables using this information. The global IPv4 routing table has about 470000 entries today. In 2004, I was upset enough with the implementation we were using back then, zebra, to start writing an own one. After showing an early prototype other developers jumped in and helped. Quickly thereafter we had a working BGP implementation that not only I have used ever since then. We'll look at OpenBGPD's design and how it differs from other implementations, the frameworks established and later used for other purposes, and the lessons we learned over the last 10 years. Henning Brauer video 16:30 01:00 Montpetit 201 A Walkthrough of FreeBSD and NetBSD ARM Code Embedded lecture en In this talk, I'll discuss how BSD kernels interface with the ARM processor. I will cover the kernel internals of the FreeBSD and NetBSD ARM ports, focusing on ARMv7 primarily. I will discuss how booting, memory management, exceptions, and interrupts work using plenty of BSD code. This talk is meant to be a quick start guide for BSD hackers who aren't familiar with the ARM architecture. Arun Thomas video 18:00 04:00 Montpetit 201 Doc Sprints BOF meeting en This doc sprint is open to both committers and anyone interested in helping to improve the documentation set (handbook, guides, man pages, website) for any of the BSD projects. This doc sprint is open to both committers and anyone interested in helping to improve the documentation set (handbook, guides, man pages, website) for any of the BSD projects. FreeBSD committers will be available to assist non-committers in getting started with the FreeBSD documentation set, learning the workflow and how to make changes, and to approve and commit patches. Committers will also work on closing doc PRs and discuss proposed changes to the documentation. Feel free to drop by and help out! Dru Lavigne 09:00 01:00 Montpetit 202 The opening session Plenary lecture en FlightWare has been using FreeBSD servers since they started. Karl will talk about some of the history behind FlightAware and various projects he has been involved with. Karl Lehenbauer http://it.flightaware.com/about/code/freebsd.rvt video - keynote 10:00 01:00 Montpetit 202 Hacking lecture en OpenvSwitch (OVS) is a very popular component for experimenting with Software Defined Networking. OVS is especially useful for interconnecting virtual machines, as it eases VM migration and reconfiguration of routing in the hosting provider. In this paper we will discuss how we ported the in-kernel OVS dataplane to FreeBSD, using the original linux code with minimal modifications and suitable wrappers to build a FreeBSD kernel module, parse netlink messages and convert skbufs and mbufs. Our module equals or exceeds the performance of the Linux one (reaching 600-700 Kpps with TAP interfaces). Our approach eases retaining feature parity as the original OVS is updated. This also includes much faster versions of OVS which we have in the works, using netmap/VALE as a dataplane. Our work will also help porting further network-related kernel modules from Linux to FreeBSD, and provides a useful starting point for a complete, BSD-licensed version of the OVS dataplane. OVS has two components: a userspace control plane, available for multiple platforms including FreeBSD; and a data plane in charge of moving packets around, with both userspace and kernel implementations. The in-kernel OVS dataplane, required to efficiently interconnect virtual machines, is a linux-only kernel subsystem. With the obvious desire to provide FreeBSD with such as useful component, we looked at how to implement in-kernel OVS for FreeBSD, by reusing the Linux kernel code and building suitable adaptation layers. As a result of our effort, we achieved a working FreeBSD openvswitchkernel module with approximately 1500 lines of new code, mostly to implement generic netlink sockets and netlink message parsing, and to convert between skbufs and mbufs. Modifications to the existing files were minimal and mainly to address compiler issues (unnamed unions; missing const qualifiers and printf format warnings) and disable a handful of unsupported features. One might rightly question our approach: the original linux-OVS kernel code is only about 8000 lines, and a complete rewrite would be feasible and could be done under a BSD license. However, we believe that our choice was appropriate for a number of reasons: our module will support updates with almost no additional work, does not incur any performance penalty, helps testing the correctness of the userspace component of OVS, and provides a suitable starting point for a BSD-licensed version of the code for interested parties. We are working with the OVS developers to integrate some of our changes, and we plan to release the code soon for use into FreeBSD, either as a port or as in-tree kernel component. The full paper/presentation will discuss the internal architecture of the in-kernel OVS dataplane, including performance issues, and give more details on the porting infrastructure. Luigi Rizzo video 11:30 01:00 Montpetit 202 An Overview Embedded lecture en And overview of NAND technology, its relevance to FreeBSD, and a discussion of the advantages and disadvantages of the NANDFS and other nand technology in FreeBSD. The first part of this talk will be generally about NAND flash, and is applicable to embedded, PCIe-based flash storage and SSD. The second part of the talk focuses on those technologies in FreeBSD to talk to raw NAND, what can be deployed today, and what additional work will be necessary in the future. NAND Flash technology continues to be important to some market segments in which FreeBSD is deployed. This talk will be in two parts. The first part of the talk will discuss NAND flash generally. The second part of the talk will focus on NAND in a FreeBSD context. In the first part, an overview of AND flash will be presented. Basics about NAND generations, NAND storage strategies (SLC, MLC, TLC), characteristics of NAND, and operational considerations will be discussed. An overview of the trends in NAND evolution and their implications will be presented. The talk will explore how these features apply to SSDs and PCIe cards. This part of the talk will be of interest to anybody using these technologies either directly attached, or in a storage product. The second part of the talk will be more focused on embedding FreeBSD, running FreeBSD from NAND and an exploration of the currently supported technology. Kernel configuration, build parameter and other details necessary to build a system will be presented. Creating a system image is a bigger challenge with NAND flash, because blocks on the part wear out and need to be retired (some blocks come from the factory this way), and how to compensate. The additional features need to be developed to deploy the latest NAND parts may be discussed. The second part of the talk will be more focused more on FreeBSD embedded systems using NAND. Warner Losh video 13:30 01:00 Montpetit 202 Don't build security on hacks Security lecture en Capsicum and Casper are FreeBSD proposal for a clean, robust and intuitive application compartmentalization. Today's sandboxing techniques build on top of existing technologies that weren't really designed for this sort of protection (like chroot(2), rlimit(2), setuid(2), Mandantory Access Control, etc.). Capsicum and Casper provide rich infrastructure for breaking applications into multiple useful sandboxes and thus significantly reducing Trusted Computing Base. Capsicum is a lightweight OS capability and sandbox framework implementing a hybrid capability system model. The Casper daemon enables sandboxed application to use functionality normally unavailable in capability-mode sandboxes. The talk will discuss Capsicum framework, Casper daemon and its services. It will provide introduction based on already implemented examples to those new FreeBSD features. The talk will also present existing portable sandboxing implementations to give clear picture how hacky those solutions are. Mariusz Zaborski Pawel Jakub Dawidek video 15:00 01:00 Montpetit 202 System Administration lecture en In this talk I would like to discuss the process I went through in replacing a research file server’s OS from Linux to FreeBSD and that of its backup system. Initially, the system was hosting a custom 32bit Gentoo Linux instance and was able to host approximately 2.5TB of data over two file systems backed by a RAID-5 software RAID implementation. The solution I implemented allowed me to leverage all the installed disks as one large ZFSv2 data volume by booting the system as a diskless FreeBSD system. I then utilized istgt (an iSCSI target software package) to offer a large disk to one of the group’s 64bit Gentoo Linux compute nodes whereby I could then launch autofs and racoon services. I would like to present this material to the BSDCan attendees to share my experience with others and to show that others can accomplish the same task without spending a large amount of money on proprietary software. In this talk I would like to discuss the process I went through in replacing a research file server’s OS from Linux to FreeBSD and that of its backup system. Initially, the system was hosting a custom 32bit Gentoo Linux instance and was able to host approximately 2.5TB of data over two file systems backed by a RAID-5 software RAID implementation. Unfortunately, due to the physical layout of the software RAID instances, if a drive failed, it was easy to physically replace and to schedule a maintenance window. However, when it came time to insert the drive replacement back into the applicable RAID volume the performance penalty for rebuilding the RAID volume was rather high. This caused the system to become unresponsive when users were trying to query or engage the file server to launch new software instances. The solution I implemented allowed me to leverage all the installed disks as one large ZFSv2 data volume by booting the system as a diskless FreeBSD system. I then utilized istgt (an iSCSI target software package) to offer a large disk to one of the group’s 64bit Gentoo Linux compute nodes whereby I could then launch autofs and racoon services (which in the Linux world means using IPSec to securely allow client machines to access file server resources in a very secure manner). The driving force behind using diskless FreeBSD is that if the research group wanted to expand their data store through the acquisition of additional storage gear the new server(s) could be booted as a diskless client, its disks configured as a ZFS data volume; leveraging istgt an additional disk would be offered to the 64bit Gentoo Linux compute node. I would like to present this material to the BSDCan attendees to share my experience with others and to show that others can accomplish the same task without spending a large amount of money on proprietary software. Dwayne Hart video 16:30 01:00 Montpetit 202 Hacking lecture en The Junos "meta mode" build is the coolest thing since sliced bread. The FreeBSD projects/bmake branch provides a proof of concept for the more general use of this technology. The latest release of FreeBSD uses bmake by default, a prerequisite for the "meta mode" build. This talk will cover the adoption of bmake and how the projects/bmake branch differs from traditional FreeBSD build. Simon Gerraty video 10:00 01:00 Montpetit 207 Keeping one foot in two socks System Administration lecture en The growth pace of IPv6 adoption is still slow, but constantly increasing, as more providers and networks migrate. There is one aspect of the adoption that is still underestimated, and it's transition mechanisms, enabling networks speaking different protocols to talk to each other. In may 2013, Switzerland jumped on top of IPv6 utilisation in the world by just having its incumbent operator enable one of these for a large base of its users. This talk will first introduce a handful of different transitioning mechanisms in use, picking the most widely used amongst the plethora of ones available. In the second part, a live demonstration will show the audience how to set up some of them using native tools on OpenBSD and FreeBSD. This talk is useful for those IT administrators who would like to get a grasp on implementing IPv6 in their network without going full native, while still offering services on the new protocol. Massimiliano Stucchi video 11:30 01:00 Montpetit 207 A portable and performant TCP/IP stack-in-a-box Hacking lecture en libuinet is a userspace library version of the FreeBSD TCP/IP stack that also includes extensions to the base stack functionality that make it particularly useful in network infrastructure equipment. This talk will cover its design goals, implementation, current and potential uses, and performance. libuinet was originally conceived as a way to bring highly scalable transparent proxy functionality to the free, portable TCP proxy WANProxy (http://wanproxy.org). To this end, libuinet extends the base FreeBSD TCP/IP stack feature set to include 'promiscuous sockets', which allow listens to capture connection attempts across VLANs (including nested), any IP address, and any port, admit/ignore those attempts based on an application-supplied filter, and retrieve the complete L2 and L3 details of admitted connections. Promiscuous socket functionality also allows active connections to fully specify their L2 and L3 identity. In this mode, libuinet has been shown to scale to 1 million active connections concurrent with 1 million listen sockets, with those million connections distributed in multiple ways across the VLAN and 4-tuple TCP addressing space. Implementation of another extension to the stack, 'passive sockets', is currently underway and targeted for completion by the end of 1Q2014. Passive sockets provide for reassembly of both data streams in a TCP connection, along with a missing-frame notification mechanism, based on a copy of the packet stream flowing between the connection endpoints (e.g., via a SPAN port). Packet I/O is accomplished via network interface drivers that plug into the bottom of the stack in the usual way, with a netmap interface being the current example. Providing additional interfaces is a straightforward exercise. Care has been taken in the implementation to make the library self-contained and straightforward to keep up-to-date via merging in later FreeBSD releases, as well as to make it reasonably portable to other UNIX-like systems (and beyond, although with some additional effort). libuinet is a useful building block for network infrastructure devices, including security, monitoring and WAN optimization applications, and is a potentially useful tool for network protocol research. Patrick Kelsey libuinet source code video 12:30 01:00 Montpetit 207 ipv6address lunch time BOF BOF meeting en Come along and learn some simple techniques which will simply your IPv6 addressing. Not using everything is key 13:30 01:00 Montpetit 207 reducing encryption overhead Security lecture en Features, like encryption, need to have minimal overhead for them to be widely adopted. If the performance is to slow, few people will use it. The first iteration of AES-XTS using AES-NI in FreeBSD was not much faster than the software version of it. The talk will describe why the AES-XTS algorithm was slow and what was done to improve it. It will cover topics from intrinsics, adding them to gcc and advantages of using them over assembly to how to use HWPC that are included in most modern processors to evaluate performance to identify performance bottle necks. Optimizing code first starts with measuring the performance, but it also requires you to understand the parts of the system so that you can decide if increasing performance is possible. It will cover: 1) Cipher modes and their performance impact 2) Processor performance, understanding pipelining, throughput and latency 3) Other SSE instructions used for XTS tweak factor calculations 4) Intrinsics and their use with GCC and CLANG 5) Using pmcstat and kcachegrind for understand performance. 6) Possible future work to increase the performance beyond what it is today. John-Mark Gurney video 15:00 01:00 Montpetit 207 practical development method from large-scale academic research to mission-critical business system Hacking en Shellscripts and Commands: practical development method from large-scale academic research to mission-critical business system Universal Shell Programming Liboratory has developed many kinds of mission-critical business systems for many companies based on their own unique and innovative development method for SI and big-data processing. The main idea of that might be too simple to believe in: text files, commands and shellscripts. You can convert almost any kind of your data into text. Then the development method tells you how to organize your data in what directories. As a result, it realizes fast processing and easy coding. This method is applicable in many areas, from as small tools to larg-scale data processing. I describe their development method in a tangible way using Open usp Tukubai and FreeBSD. Daichi GOTO Universal Shell Programming Laboratory, Ltd. BSD Consulting, Inc video 16:30 01:00 Montpetit 207 Maintaining an internal fork of FreeBSD Hacking lecture en Detailed discussion of tips, tools and strategies for maintaining internal software forks with a particular emphasis on FreeBSD and its use in EMC's Isilon Storage Division. Occasionally you need to fork a project. You probably still want to track the upstream version but you've got local modifications you need to maintain. The EMC Isilon Storage Division does this with FreeBSD in a big way. This presentation will go through what happens when you don't keep up to date and how you can get back up to date in a way that can still mesh with your release process. It'll also go through tools you can use to help the process along and keep your project managers happy and strategies for making sure you don't get behind again. Benno Rice video 10:00 06:00 Morisset 212 public track FreeBSD Developers Summit lecture en This is a place holder. Individual talks will be added to the schedule closer to the conference dates. Dan Langille Justin T. Gibbs List of talks and times 18:00 06:00 Hacker Lounge - L140 meet, greet, hack Social other en The hacker lounge is on the ground floor of residence. Bring your laptop, enjoy. This room is located just past the lobby. You may need to ask for the key at the desk. Proper behaviour is expected, or you'll be asked to leave. :) If you must ask what proper behaviour is, well, it sounds like you shouldn't be there. The starting time is flexible, so is the ending time. Just show up. wifi will be available. In order to play nicely with others, please bring an extension cord / power strip. Please keep this room tidy and clean. Dan Langille 12:30 02:00 University Center 206 bsda2 BSD Certification Exams other en Take the BSDA certification. The BSD Certification Group Inc. is a non-profit organization committed to creating and maintaining a global certification standard for system administration on BSD based operating systems. YOU MUST register and pay for this event. See the link for details. Dru Lavigne Register here 15:00 01:00 University Center 206 BOF meeting en nil nil Matt Ahrens 10:00 01:00 Montpetit 201 enhancing the modern toolbox for the classic documentation formats Hacking lecture en Since its first presentation at BSDCan 2011, the mandoc(1) documentation formatting system has gained a lot of traction in all four major BSD operating systems and beyond. This talk will provide an update regarding recent feature additions, in particular the mdoc(7) to man(7) converter to produce high quality manual formatting for portable software packages, and the new SQLite3-based mandocdb(8) utility, a drop-in replacement for the traditional makewhatis(8)/apropos(1) combo, providing markup-sensitive search capabilities and flexible search result output formats. I will give an overview of the adoption status of mandoc(1) and mandocdb(8) in OpenBSD, DragonFly, NetBSD, and FreeBSD as well as a few other free operating systems, comment on mandoc versus groff usage in the OpenBSD ports tree including recommendations for handling manuals in packaging systems in general, and comment on possible future development directions. During its first three years of being the only documentation formatter in the OpenBSD base system, the mandoc(1) utility has matured considerably. While we certainly continue tuning mandoc to bring its output even closer to groff(1) output, development focus has shifted from implementating basic features and fixing bugs to extending its scope beyond the mere formatting of manuals. After a brief introduction explaining the advantages of mdoc(7) as the markup language for writing manuals and of mandoc(1) as the manual formatter, this talk will focus on two features recently added to mandoc: 1. The mandoc -Tman output mode for converting hand-written mdoc(7) documents into autogenerated man(7) code. The talk will explain how to use this to produce high quality documentation for portable software packages. The portable sudo(8) distribution will be used as an example. 2. The usage, implementation, optimization, and performance of the SQLite3-based mandocdb(8) utility, a drop-in replacement for the traditional makewhatis(8) program, in concert with the SQLite3-based apropos(1) replacement. These tools add markup-sensitive search capabilities and flexible output formats to the traditional apropos(1) functionality. To name some examples, they let you specifically search for include file names, function and argument types, function argument names, variable types and names, preprocessor constants, error constants, environment variables, command arguments and flags, file system paths, kernel configuration directives, author names, standards, operating system releases and cross references across all manuals installed on the local machine. They support complex search queries supporting "or" and "and" operators and parentheses, and they allow to show the contents of user-chosen macros in place of the usual (Nd) description line in the output. Ingo Schwarze mandoc homepage 11:30 01:00 Montpetit 201 Charting the rabbit hole to improve FreeBSD performance on Xen Hacking lecture en The Xen hypervisor is a Open Source Type 1 hypervisor, it's widely used on production environments like Amazon EC2 and Rackspace. Since it's inception, one of the focuses of Xen was to be an OS agnostic hypervisor, allowing any kind of OS (with proper Xen support) to act as DomU/Dom0. This talk will cover how the Xen community works, together with an explanation of the ongoing work in FreeBSD in order to improve Xen support. This talk will cover the following points: - Basic Xen description and specific Xen concepts. - How the Xen community works (compared to BSD communities). - A look into new Xen features (PVH). - Work being done in FreeBSD improving Xen support. - Probably a small demo to highlight Xen features. Roger Pau Monné video 12:30 01:00 Montpetit 201 ezjail lunch time BOF BOF meeting en ezjail is a great tool for managing jails on FreeBSD Come along and learn from others. Allan Jude Dan Langille 13:30 01:00 Montpetit 201 Security lecture en Address-space layout randomization (ASLR) has existed in many operating systems for a number of years. The most famous implementation is the PaX patch for Linux's kernel. This presentation introduces and announces an ASLR implementation based on PaX for FreeBSD/amd64. Details regarding how ASLR has been ported to FreeBSD and some advanced features will be presented. FreeBSD will soon be getting a port of PaX to 11-CURRENT/amd64. This presentation details changes to how ELF executables are loaded in memory and innovative workarounds for legacy applications that don't support (or misbehave) ASLR. Jails can have their own ASLR settings. Misbehaving applications can be run in a jail with ASLR turned off, while ASLR remains turned on in the other jails and in the host. Shawn Webb Current ASLR Status video 15:00 01:00 Montpetit 201 Hacking en During the software development lifecycle (SDLC), it is highly desirable that developers can rapidly work on new features, integrate their code into the main codebase, and not break existing functionality. Continuous Integration (CI) is a technique where code is continuously integrated, built, and tested. Jenkins ( http://www.jenkins-ci.org ) is a CI framework which is used by many software organizations to do integration, building, and testing of code. Jenkins is flexible and extensible by hundreds of plugins. This talk will describe how the FreeNAS project uses Jenkins for doing automated software builds. This talk will also cover how the BSD Hypervisor (BHyVe) is used for booting and testing FreeNAS images. The talk will also discuss how WebDriver is used for automating some of the web-based testing for FreeNAS. Craig Rodrigues 18:00 04:00 Montpetit 201 Doc Sprints BOF meeting en This doc sprint is open to both committers and anyone interested in helping to improve the documentation set (handbook, guides, man pages, website) for any of the BSD projects. This doc sprint is open to both committers and anyone interested in helping to improve the documentation set (handbook, guides, man pages, website) for any of the BSD projects. FreeBSD committers will be available to assist non-committers in getting started with the FreeBSD documentation set, learning the workflow and how to make changes, and to approve and commit patches. Committers will also work on closing doc PRs and discuss proposed changes to the documentation. Feel free to drop by and help out! Dru Lavigne 10:00 01:00 Montpetit 202 An introduction Hacking lecture en FreeBSD has seen the birth of its test suite in 2013 and, while the result is heavily based on experience gained in the NetBSD project, there are significant differences between the two. Come to this talk to learn what the FreeBSD test suite is by looking at the various design choices, the tools in use, the roadmap to the final product and, if you are into coding, some actual examples of tests and the process to plug them into the suite. FreeBSD has been in the need for an automated test suite for a long time. During the last few years, various alternatives have been investigated and, finally, the beginnings of a tangible test suite surfaced in 2013. The FreeBSD test suite is now a reality: the system builds and installs tests out of the box; the test suite can be trivially executed with a single command; the testing cluster is up and running, publishing results for test runs about twice per hour; and there is a lot of ongoing work to make the current setup better. This talk will provide you with a general overview of the new FreeBSD test suite, both from the perspective of an end user and of a developer. We will cover many different areas, including but not limited to: the structure of the test suite, covering the use of Kyua as the run-time engine and the various "frameworks" available to implement test programs; the set up of the continuous testing cluster, to understand how its activity benefits developers; the differences between the FreeBSD and NetBSD test suites, and how the two will eventually converge; the future plans for the test suite, especially in the area of reporting and kernel-level testing; and, to conclude, we will get our hands dirty by seeing actual code for a bunch of simple tests. You will hopefully get a sense of the non-existent difficulty to start writing tests en-masse! Julio Merino FreeBSD Test Suite (project page) Kyua (project page) Introducing the FreeBSD test suite (bog post 2013-12-31) slides 11:30 01:00 Montpetit 202 FreeBSD Developers Summit lecture en In the context of package management, the solver is an algorithm (or set of algorithms) to resolve dependencies and conflicts. The solver must handle options, upgrades, multiple repos, locally installed software, as well as other factors. The upcoming 1.3 release of pkg will have the new solver that has some important consequences. This talk is dedicated to the design concepts of the new solver in pkg management system (pkg-ng initially). In this talk, I describe the basic architecture of the solver, ideas used and the consequences of using this algorithm. Moreover, this talk describes the proposed pkg and ports architecture to simplify binary packages and ports using for all FreeBSD users. The proposed talk is oriented to the wide auditory of FreeBSD users and describes the architectural design of pkg and ports that is going to be implemented. I concentrate on the following topics: - the interaction of ports and packages - how pkg may be used for ports management - what are the alternatives used by other packages management systems (yum/apt/zypper/MacPorts) - the basic description of the SAT problem and how this algorithm can be applied to packages management - multiple repos handling - the improved support of custom options - advanced conflicts and dependencies - fine-grained packages distribution - base system interaction - the speed estimations This talk is intended to improve the understanding of pkg internals and the future plans of FreeBSD packages and ports development. Vsevolod Stakhov The slides of ruBSD presentation http:// 12:30 01:00 Montpetit 202 and related projects BOF BOF workshop en There are a number of developers here, as well as foundation representation. Anyone interested in anything related to OpenBSD and/or LibreSSL can attend and ask us all questions and chat. Bob Beck 13:30 01:00 Montpetit 202 Embedded lecture en The talk covers recent work on providing transparent superpages support for the FreeBSD operating system on ARM. The concept of superpages is a virtual memory system optimization, which allow for efficient use of the TLB translations, effectively reducing the overhead related to the memory management. This technique can significantly increase system's performance at the interface between CPU and main memory thus affecting its overall efficiency. The lecture focuses on presenting superpages mechanism supported by the FreeBSD in the context of its implementation for the ARM architecture. Principles of the virtual memory operations are briefly presented to illustrate the requirements and limitations standing before the related subsystem. The talk provides description of the virtual memory system architecture introduced in ARMv6/v7 compliant processors and the opportunities to take advantage of the superpages technique. The primary focus of the presentation is to elaborate on how the superpages functionality was implemented on FreeBSD/arm and what are the results of its application. The talk presents real-life measurements and benchmarks performed on modern, multiprocessor ARM platforms. Hence, the actual achievements and areas of application are shown. Finally, the article summarizes the integration process to the mainline FreeBSD and discusses the areas of future work and improvements. Zbigniew Bodek Wiki page on FreeBSD.org Article on ARM Blogs 15:00 01:00 Montpetit 202 FreeBSD and the ARM based Beaglebone Black board. Demonstrating a ROV with I/O and video streaming. Embedded podium en An embedded ROV powered by FreeBSD and Beaglebone Black. It demonstrates the usage of the flattened device tree (FDT) plus video streaming by WIFI and motor drivers remote control. Opencv features and power actuators by MOSFET drivers. This talk is about a remotely operated vehicle (ROV) with I/O management for sensors and motor drivers. The system runs FreeBSD and offers a webGUI over WIFI to control the movements and watch a video streaming from the onboard camera. The platform used is the popular embedded board Beaglebone Black with a custom cape (shield) on top for the I/O connectivity. Beaglebone Black is an ARMv7 system with integrated RAM and flash memory for the root filesystem, it offers many more capabilities such as input/output pins ready to connect to sensors and actuators. BBB has enough processing power and speed for Opencv tasks, networking, web services and GPIOs I/O. This robot can be controlled remotely by a joystick or using the controls on the web GUI. To manage GPIOs and the output for the motor drivers, it was used the FreeBSD flattened device tree (FDT). To keep the system reliable and fast, a custom kernel was compiled and the system environment was carefully prepared. The list of features available: -Remote control of the motors via WIFI (webGUI or Joystick) -WIFI hotspot -Video streaming from the onboard camera -MOSFET actuators -Sensors collection to gather environmental data -OpenCV video features -Stepper motors to move a robotic arm and video camera -webGUI with websockets Fabio Balzano http://beagleboard.org/products/beaglebone%20black https://wiki.freebsd.org/FlattenedDeviceTree 16:15 01:00 Montpetit 202 close The wrap up Plenary lecture en The closing Fun. Games. Awards. Dan Langille video 10:00 01:00 Montpetit 207 The first 30 days, and what the Future Holds Security lecture en LibreSSL is a recently started initiative by the OpenBSD project to fork and clean up the OpenSSL code base. We have been working on this rather intensively for about a month now. I will be discussing the Origins of LibreSSL (The OpenBSD Fork of OpenSSL) - including why we decided to fork, what we are hoping to achieve, as well as a number of examples of the sorts of code changes we are doing, and the sorts of issues we have found in the code base and how we are changing things. All who are potentially interested in something better than OpenSSL may find this talk of interest. Bob Beck LibreSSL project slides video 11:30 01:00 Montpetit 207 Invited Talks lecture en The OpenZFS project provides a common development hub for all platforms working with open source ZFS code. Currently, it is easy to pull changes from Illumos into FreeBSD, but it is more difficult to submit changes from FreeBSD to Illumos. This talk will discuss how OpenZFS will enable ZFS code and ideas to flow easily between the Illumos, FreeBSD and ZFS on Linux communities. In addition, I will present several important features and performance enhancements to ZFS in FreeBSD, and also discuss forthcoming enhancements that are in the planning phase. Matt Ahrens video 12:30 01:00 Montpetit 207 BOF BOF other en NFSv4/pNFS BOF see above Dan Langille 13:30 01:00 Montpetit 207 FreeNAS development Hacking lecture en FreeNAS has been around for several years now, however, development on it has been by very few people. Even with corporate sponsorship and a team of full time developers, outside interest has been minimal. Not a week goes by when a bug report or feature request is not filed. Documentation on how to develop on FreeNAS simply does not exist. Currently, the only way to come up to speed on FreeNAS development is to obtain the source code, read through it, modify it and verify it works. The goal of this talk is to create a simple FreeNAS application to demonstrate some of the common methods used when dealing with FreeNAS development, as well as showcase some of the API. John Hixson FreeNAS website 15:00 01:00 Montpetit 207 Hacking lecture en While FreeBSD has been experiencing a huge momentum with ZFS and UFS2 continues to improve in exciting ways, another UFS variant has seen some advances: Ext2fs is trying to catch up with the new times. FreeBSD's ext2 implementation has a huge history: it started it's life as part of BSD-Lites for CMU's Mach. It got ported to FreeBSD and after some rust gathering it eventually got important merges from NetBSD's port so now it is completely GPL free and is supporting new features. Ext2 uses many concepts that are based on UFS but, for good or for bad, Ext2 has never been considered important enough to compete with the local UFS filesystem in the BSDs. Both filesystems have also taken different design decisions over the years and it is not always clear which developments are a clear win on either side. The core of both filesystems is indeed very similar and that similarity has made it relatively easy to adopt in FreeBSD's Ext2fs many enhancements based on FreeBSD's UFS support. Recent years have seen some developments based on successful Google Summer of Code Projects so FreeBSD's driver has support for the directory index and read-only support for extents. This talk presents the recent developments in ext2fs for FreeBSD and attempts to compare the linux ext2/3/4 features with the typical UFS filesystem in the BSDs. Pedro Giffuni FreeBSD's Ext2 wiki video 18:00 05:00 Hacker Lounge - L140 meet, greet, hack Social other en The hacker lounge is on the ground floor of residence. Bring your laptop, enjoy. This room is located just past the lobby. You may need to ask for the key at the desk. Proper behaviour is expected, or you'll be asked to leave. :) If you must ask what proper behaviour is, well, it sounds like you shouldn't be there. The starting time is flexible, so is the ending time. Just show up. wifi will be available. In order to play nicely with others, please bring an extension cord / power strip. Please keep this room tidy and clean. 12:30 02:00 University Center 206 bsda1 BSD Certification Exams other en Take the BSDA certification. The BSD Certification Group Inc. is a non-profit organization committed to creating and maintaining a global certification standard for system administration on BSD based operating systems. YOU MUST register and pay for this event. See the link for details. Dru Lavigne Register here 10:00 06:00 Out and About tourist Spend some time exploring Social other en Explore Ottawa This is a self-led tour. Nobody will be there to guide you. This is a suggested location where you can meet and decide where to go from there. Ottawa has a large number of great attractions. Spend some time looking around and explore. Spend as much time as you want with us, or leave early. We will walk everywhere we go. Wear sensible shoes. Bring your camera. We'll probably have lunch somewhere along the way. Consider the weather (sun block, rain coat, umbrella, swim suit). We will depart from the National Memorial at 9:30 AM *if the weather is good*. If it's raining, we'll assemble in the lobby of Residence instead (same time). If you have ideas/suggestions/plans, please let others know via the forum. From that list, we'll decide what to do on the day. Dan Langille National Memorial Residence Forum 10:00 04:00 University Center 206 Take the BSDP Professional Beta Lab Exam Exams other en The BSD Certification Group Inc. is pleased to announce the availability of the BSDP Beta Lab Exam. This exam is a hands-on exam that will test your ability to configure up to three BSD systems according to a set of instructions. Exam laptop workstations (with US keyboard layout) will be provided. Limited availability (10 seats) - first come, first served. YOU MUST register and pay for this event. (Payment for this Beta Lab Exam is to help offset the cost of equipment rental.) More information and registration are [here](https://register.bsdcertification.org/events/bsdp-lab-beta). Jim Brown You can read more about the BSD Professional exam here The BSD Professional exam objectives