Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 18 Jul 2005 20:35:18 +0100
From:      Alex Zbyslaw <xfb52@dial.pipex.com>
To:        Matt Juszczak <matt@atopia.net>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Billing Server
Message-ID:  <42DC0476.5090304@dial.pipex.com>
In-Reply-To: <20050718142533.Y74755@neptune.atopia.net>
References:  <20050718142533.Y74755@neptune.atopia.net>

next in thread | previous in thread | raw e-mail | index | archive | help
Matt Juszczak wrote:

> We're setting up a billing server on a Xeon 3.06 ghz with IDE drives 
> (but it doesn't need to be amazingly fast).
>
> The billing system we're using supports freebsd 4.11 natively with 5.x 
> support.
>
> I need this machine to be tight, and although it will have a public 
> IP, pf will be installed to keep SSH access to our network only as 
> well as the web interface of the billing system.
>
> I'm wondering whether to install 4.11 on this machine or go with 5.4.  
> I need something stable, rock solid, and secure, and I know 5.4 is 
> this also, but it is updated more often than 4.11.
>
If you are sure that all the necessary hardware is supported under 4.11, 
and you're not going to want the server to do anything new in the 
future, then I'd stick with 4.11 since your app  might like it better.  
Security patches should keep coming for some time (2007?).

You say 5.4 is updated more than 4.11.  I do not think that is 
particularly true if you track -RELENG_5_4  (vs -RELENG_4_11) as opposed 
to tracking, say -STABLE.  For a locked down server, not even all 
security updates will need immediate action.

You can always hedge your bets and (if your disk is big enough) leave a 
bunch of free space in a slice that you can later use to update to 5.X 
if you need to.  That will also leave 4.11 around if you change your 
mind.  I did it this way and it was relatively painless.

--Alex






Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?42DC0476.5090304>