Hacker News new | ask | show | jobs
by joshbaptiste 4205 days ago
I would definitely sign up for a FreeBSD droplet, I haven't found a *BSD VPS anywhere near what I'm paying comparable to the specs of a couple OpenVZ Debian GNU/Linux nodes (512MB Ram/50Gb Disk/2TB net) $15/yr. I would hope OpenBSD adoption would soon follow to host many of my services in a more default hardened OS.
2 comments

Er, seems odd to be using OpenVZ if security/hardening is what you're after.

The shared kernel is a larger attack surface compared to KVM or Xen, and the OpenVZ host admin can easily see/manipulate your running processes.

No hate for OpenVZ though, I've used it constantly for about 4 years, but it makes me nervous when its discussed in a multi-tenant context.

Why do you think a shared kernel is somehow more secure than a hypervisor?
Me? My point was that HV/PV virtualization is likely to be more secure than OpenVZ, sorry if it was unclear.
ah indeed.. security isn't my focus on those nodes, running a couple of test server applications.
Have you seen vultr.com? There's also atlantic.net and dediserve.com for comparison.