[OpenIndiana-discuss] Community interest in illumos PF port?

[Alan Coopersmith]

On 05/13/16 09:32 AM, Nikola M wrote:
> On 05/13/16 06:14 PM, Alan Coopersmith wrote:
>> On 05/12/16 10:50 PM, Nikola M wrote:
>>> I would also like to see an announcement about ipfilter deprication in S11 yet.
>>
>> http://www.oracle.com/technetwork/systems/end-of-notices/eonsolaris11-392732.html
>>
>> "The IPFilter firewall will not be available in a future release. In future
>>  releases of Oracle Solaris OS, the OpenBSD Packet Filter (PF) will be
>>  available as the firewall. PF will be available in the pkg:/network/firewall
>>  package.
>>
>>  If you upgrade your Oracle Solaris 11.x OS to newer versions, the upgrade
>>  process is facilitated by the ipf2pf (pkg:/network/ipf2pf) package. This
>>  package installs the tools that will assist you in the migration of IPFilter
>>  configuration to PF.
>>
>>  Note: Manual intervention will be required to ensure PF rules implement the
>>  desired network policy."
>>
>
> Thanks much Alanc. Was looking for something like that page.
>
> Does that mean that might happen inside 11.x as i see it mentions , so inside
> S11 lifetime in one of the updates.
>
> As interesting as it is, it would surely need a separate project at illumos and
> see no direct connection with illumos implementing it except, it is nice to have
> it.

The page doesn't specify exact releases to leave our options open, but the
current plan is to have both IPfilter & PF in 11.x releases for a transition
period, and then drop IPfilter in 12.0.  As with all software plans, they're
subject to change as we develop the code.

	-alan-