[BACK]Return to users.html CVS log [TXT][DIR] Up to [local] / www

Annotation of www/users.html, Revision 1.138

1.79      jufi        1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
1.1       jkatz       2: <html>
                      3: <head>
1.18      deraadt     4: <title>OpenBSD at work</title>
1.88      jufi        5: <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
1.123     deanna      6: <meta name="copyright" content="This document copyright 1999-2007 by OpenBSD.">
1.136     sthen       7: <link rel="canonical" href="http://www.openbsd.org/users.html">
1.1       jkatz       8: </head>
                      9:
1.88      jufi       10: <body bgcolor="#ffffff" text="#000000" link="#23238e">
1.81      jsyn       11: <a href="index.html"><img alt="[OpenBSD]" height="30" width="141" src="images/smalltitle.gif" border="0"></a>
1.6       downsj     12: <p>
1.79      jufi       13: <h2><font color="#e00000">Users</font></h2>
                     14: <hr>
1.104     david      15: The term "users" has several connotations. <em>End users</em> often
1.47      ian        16: want to meet other users of the system, to share ideas, problems and solutions,
                     17: and discuss the system over a meal or a beer. One of the best ways to do this
                     18: is with one of our
                     19: <a href="groups.html">User Groups worldwide</a>.
                     20: <p>
                     21: Another connotation of the term is "who is using the system, and for what?",
1.56      louis      22: and that is the subject of the rest of this page.  These <a
1.65      jufi       23: href="#com">companies</a> and organizations trust OpenBSD's rigorous code audit
1.38      louis      24: and security-first development model. They use the system to build firewalls,
1.56      louis      25: intrusion detection systems, or general purpose servers.
                     26: <a href="#edu">University researchers</a> and IT department developers often
                     27: have similar security and stability requirements and choose OpenBSD.
                     28: Many <a href="#isp">Internet Service Providers</a> find OpenBSD's
                     29: security features hard to resist.
1.113     mbalmer    30: Even <a href="#gov">governments</a> from different countries pick OpenBSD
1.114     ian        31: for securing their vital informational infrastructure.
1.56      louis      32: <p>
1.38      louis      33:
                     34: If you would like to be listed on this page, send the information to
                     35: <a href="mailto:press@openbsd.org">press@openbsd.org</a> .
                     36: <br><br>
                     37:
                     38: <i><b>NOTE:</b> For reasons of security, companies can ask us to withhold
                     39: their names, or those of their clients. They would then appear as
                     40: "Undisclosed Company".</i><br><br>
1.1       jkatz      41: <hr>
                     42:
1.112     ian        43: <h2><font color="#e00000"><a name="gov">Governments</a></font></h2>
                     44: <ul>
1.117     grunk      45: <li><a href="http://www.humanrights.gov.au">Human Rights and Equal
                     46: Opportunity Commission, Australia</a><br>
                     47: Established in 1986 and based in Sydney, HREOC is an independent
                     48: statutory organisation which administers federal laws relating to
                     49: alleged human rights breaches and discrimination.  The Commission is also
                     50: responsible for human rights education and the investigation and
                     51: conciliation of discrimination and human rights complaints.  OpenBSD is
                     52: being utilised to offer various network services.
                     53: <p>
                     54:
1.112     ian        55: <li><a href="http://www.moptt.cl/">Ministerio de
                     56: Obras P&uacute;blicas del Gobierno de Chile</a><br>
                     57: The Public Construction Ministry of the Republic of Chile runs
                     58: a national WAN and use OpenBSD for their firewalls and link loadbalancers,
                     59: based on
                     60: pf.
                     61: They have been using OpenBSD since the year 2001, and selected the OS
                     62: so they could sleep well at night without fear of being hacked.
                     63: <p>
                     64:
1.121     grunk      65: <li><a href="http://www.culturayturismo.gov.co/">Instituto Distrital de
1.127     wvdputte   66: Cultura y Turismo</a>, Bogota, Colombia<br>
1.121     grunk      67: In this government agency, OpenBSD is essential: perimeter firewalls,
                     68: network intrusion systems, bandwidth managers and a mail filter gateway
                     69: that uses spamd and some other OpenBSD tools keep their network secure.
                     70: <p>
                     71:
1.112     ian        72: <li><a href="http://www.ceesonora.org.mx">Sonora State Electoral Council,
                     73: M&eacute;xico</a><br>
                     74: This government agency uses OpenBSD to protect its
                     75: network and for intrusion detection.  The OpenBSD-based VPN
                     76: provides online electoral results to both internal and external users.
                     77: <p>
                     78:
                     79:
                     80: </ul>
                     81:
1.79      jufi       82: <h2><font color="#e00000"><a name="edu">Research and other Non-Commercial Users</a></font></h2>
                     83: <ul>
1.27      ian        84:
1.95      millert    85: <li><a href="http://www.ospedalimantova.it">Azienda Ospedaliera, Mantova, Italy</a><br>
                     86: Azienda Ospedaliera "Carlo Poma" is the largest health institution in
                     87: the province of Mantova (Lombardia) with six hospitals and other small
                     88: ambulatories.  OpenBSD was chosen for its reliability and now serves as
                     89: the bridging firewall between the WAN and the main Hospital of Mantova.
                     90: We use pf and altq for firewalling and QoS applications, and use fwanalog
                     91: to generate WAN traffic statistics.
1.94      millert    92: <p>
                     93:
1.96      millert    94: <li><a href="http://www.belperschool.co.uk">Belper School, Belper, Derbyshire, UK</a><br>
                     95: The Belper School uses OpenBSD machines as Samba file servers for around
                     96: 1100 students as well as for student web hosting and a firewall/NAT gateway.
                     97: <p>
                     98:
1.124     deanna     99: <li><a href="http://www.capitol-college.edu/">Capitol College</a><br>
                    100: Capitol College is the only independent college in Maryland
                    101: dedicated to engineering, computer science, information technology
                    102: and business.  Capitol College is a regionally accredited institution
                    103: offering associate, bachelor's and master's degrees, as well as
                    104: professional development training and certificates.  They use OpenBSD
                    105: for a variety of functions, from serving their website, protecting
                    106: their network with the PF firewall and QoS, Intrusion Detection
                    107: monitoring, and hosting their internal Certificate Authority.
                    108: <p>
                    109:
1.97      millert   110: <li><a href="http://elm.eu.org/">ELM consortium, Biocomputing Unit EMBL, Heidelberg, Germany</a><br>
                    111: The ELM consortium runs the The Eukaryotic Linear Motif Database and uses
                    112: OpenBSD for the consortium's communication servers.
                    113: <p>
                    114:
1.104     david     115: <li><a href="http://www.iztacala.unam.mx">ENEP Iztacala</a><br>
                    116: ENEP Iztacala is one of <a href="http://www.unam.mx">UNAM</a>'s peripheral
1.58      louis     117: schools. UNAM is Mexico's largest University, with over 250,000 students,
                    118: and at ENEP Iztacala we have a bit over 10,000 students. This is mostly
                    119: a health-oriented campus, so the computer area is not a big one.
                    120: <br>
                    121: We run as servers currently two OpenBSD, one Solaris and two Linux boxes.
                    122: With OpenBSD we handle the main web site (happily running on a 7-year old
                    123: Sparcstation 5), part of our mail accounts and our firewall.
                    124: <br>
1.65      jufi      125: There are two additional OpenBSD computers, in our development area. One of
1.58      louis     126: them acts as a network monitor (using Snort) and will shortly be moved to
                    127: sit next to the firewall, and the other one serves as an OpenBSD CVS
1.109     grunk     128: mirror.
1.58      louis     129: <br>
                    130: We do not do run very creative stuff, we just use OpenBSD for what it does
                    131: best: run smoothly, even on older hardware, freeing us from most concerns
                    132: and doubts we have about our other operating systems.
                    133: <br>
                    134: We also host a Spanish OpenBSD mailing list (openbsd@tlali.iztacala.unam.mx).
                    135: <p>
                    136:
1.94      millert   137: <li><a href="http://fortthunder.org/music/ff/index.html">"Forcefield" art installation</a><br>
                    138: Part of the audio and lighting for the <em>Forcefield</em> art installation
                    139: at the 2002 Biennial exhibition at the Whitney Museum of American Art in
                    140: New York is being controlled by a VAXstation 3100 running OpenBSD.
                    141: OpenBSD was chosen because it is simple and reliable.
                    142: <p>
                    143:
1.66      jufi      144: <li><a href="http://www.hus.fi/group/">Helsinki University Central Hospital, Finland</a><br>
                    145: The Hospital District of Helsinki and Uusimaa (HUS), with staff totaling approx. 18.000,
                    146: provides specialized medical care for the residents of the capital and other member
                    147: local authorities. OpenBSD is used for DNS, mail gateway, VPN and firewall solutions both
                    148: on the internal campus network and on the Internet.
                    149: <p>
                    150:
1.60      louis     151: <li><u>INFN Italian Institute of  Nuclear Physics, Florence, Italy</u><br>
                    152: This non-profit government research and academic institution uses OpenBSD
                    153: for domain name service and IPF firewall packet filtering.
                    154: <p>
                    155:
1.116     grunk     156: <li><a href="http://www.lockss.org/">The LOCKSS Program</a><br>
                    157: ("Lots of Copies Keep Stuff Safe"), Stanford University Libraries, uses a
                    158: <a href="http://lockss.stanford.edu/david1.htm">network appliance</a>
                    159: based on a modified version of OpenBSD that boots and runs from CD.
                    160: Over 100 of these appliances are running in libraries around the world.
                    161: They collect and preserve materials published on the web,
                    162: including academic journals, theses and dissertations, cultural
                    163: collections and government documents.
                    164: <p>
                    165:
                    166: <li><a href="http://www.pwg-unna.de/">Peter-Weiss-Gesamtschule, Unna, Germany</a><br>
                    167: This German comprehensive school educates students of ages 10 to 19 years old.
                    168: The school offers Computer Science classes and provides laptops to students.
                    169: <br>
1.118     grunk     170: Peter-Weiss-Gesamtschule has been using OpenBSD routers since 2003 and
                    171: since December 2005, all servers run OpenBSD exclusively.
                    172: The wireless network uses authpf.
1.116     grunk     173: They chose OpenBSD for its security and its powerful packet filter.
                    174: <p>
                    175:
1.94      millert   176: <li><a href="http://www.polyprep.org">Polytechnic Preparatory Country Day School</a><br>
                    177: Poly Prep CDS, a large private school in the south of Brooklyn, NY,
                    178: has been using OpenBSD since its 2.9 release for its firewalls (on
                    179: both campuses) and now for its student fileservers.  The student
                    180: fileservers, which are a part of the student computer club, run
                    181: OpenBSD 3.2 and are administered by students under the guidance of
                    182: an experienced UNIX Administrator.  The goal of the program is to
                    183: teach potential computer professionals the responsibility needed
                    184: in running a UNIX-like system, good security practices and to show
                    185: the students that there are alternatives to Linux.
                    186: <p>
                    187:
1.56      louis     188: <li><u>Prague Institute of Chemical Technology, Czech Republic</u><br>
                    189: The university uses OpenBSD on PCs to provide WWW, mail and shell access to
                    190: staff and students, and on a SPARC IPX for a time server and secondary DNS.
                    191: The admin stations also run PCs with OpenBSD.
                    192: <p>
1.43      deraadt   193:
1.128     ian       194: <li>The <a href="http://www.rcmusic.ca/">Royal Conservatory of Music</a><br>
                    195: The RCM in Toronto, Canada is a 120-year-old national cultural
                    196: institution with an alumni base of around 800,000 Canadians who have
                    197: either studied through its system of teachers and examinations or taken
                    198: music lessons based on the RCM curriculum.
                    199: Recently, they have been branching out into other areas of the arts.
                    200: The RCM also operates its own
                    201: <a href="http://www.frederickharrismusic.com">publishing house</a> and an
                    202: <a href="http://www.rcmexaminations.org">online examination
                    203: scheduling service</a> for its students.
                    204: <p>
                    205: They operate a heterogeneous network that incorporates an IBM i520
                    206: (successor to the AS/400), multiple Sun boxen, Windows machines, and some
                    207: FreeBSD systems.
                    208: The first use of OpenBSD is to provide a secure router for the IT lab;
                    209: other applications are coming.
                    210: <p>
                    211:
1.119     grunk     212: <li><a href="http://sese.asu.edu/">School of Earth and Space Exploration,
                    213: Arizona State University, USA</a><br>
                    214: SESE uses OpenBSD for nearly every public-facing server we manage.
                    215: Being an academic institution, many of our systems run OpenBSD/sparc
                    216: and OpenBSD/macppc, including the public FTP/HTTP/AnonCVS server
                    217: <tt>mirror.sese.asu.edu</tt>. We also abuse OpenBSD on a number of
                    218: authpf'ing firewalls, proxies, and monitoring (nagios, cacti, nut, etc).
                    219: <p>
                    220:
1.56      louis     221: <li><a href="http://www.ualberta.ca/">The University of Alberta</a><br>
                    222: uses OpenBSD on SPARC and Intel hardware for proxy servers, Kerberos
                    223: servers, print servers, service monitoring, pre-emptive security
                    224: scanning, and incident response.  OpenBSD on Intel Hardware is used
                    225: for Firewalls and Lan-to-Lan VPN for the university's secured subnets
                    226: behind which all the University's new administrative systems
                    227: reside. OpenBSD is used for <A
                    228: HREF="http://www.ualberta.ca/~beck/authgw.html">authenticating
1.104     david     229: gateways</a> in front of public labs and public ethernet jacks in
1.56      louis     230: approximately 40 locations across campus (about 1500 seats) to help
                    231: secure public internet access. The Department of Computing Science is using two
                    232: 20 seat OpenBSD labs for undergraduate instruction.<p>
                    233:
1.126     deanna    234: <li><a href="http://www.ucdavis.edu/">The University of California, Davis</a><br>
                    235: OpenBSD is used extensively in Schools, Colleges, and Departments at UC
                    236: Davis as part of the campus firewall solution.  Additionally, OpenBSD
                    237: servers provide instructional lab fileserver redundancy with CARP, serve
                    238: up web content in Zope/Plone, proxy websites with Squid, and provide
                    239: networking services such as dhcp and DNS (djbdns).<p>
                    240:
1.96      millert   241: <li>The University of Lund's <a href="http://www.jur.lu.se">Law Department</a><br>
                    242: The Department uses OpenBSD for Firewalls, NAT, squid proxies and
                    243: intrusion detection.  Their students use the web for applications
                    244: such as internet courses and multimedia lectures, all of which
                    245: pass through one or more OpenBSD boxes.
                    246: <p>
                    247:
1.56      louis     248: <li>The University of Michigan's <a href="http://www.citi.umich.edu/">
                    249: Center for Information Technology Integration (CITI)</a><br>
                    250: The CITI laboratory uses OpenBSD as the basis
                    251: for many intensive research projects.
                    252: OpenBSD is used for developing and analyzing
                    253: <a href= "http://www.citi.umich.edu/projects/sinciti/smartcard/">smart card</a>
                    254: contents and protocols, both in isolation and in real
                    255: applications. Plans are underway to issue cards
                    256: containing secure tokens for user logins and kerberos ticket acquisition.
                    257: OpenBSD is also used as a test platform for the
                    258: <a href= "http://www.citi.umich.edu/projects/mobile.html">mobile computing</a>
                    259: program at CITI. Internally "The Packet Vault" is an
                    260: OpenBSD machine that captures and records on cd-rom every packet on the
                    261: local 10 Mbps ethernet. Packet contents are encrypted to comply with
                    262: privacy requirements. This practice is used for intrusion detection. In
                    263: addition, a number of people within the department are using OpenBSD as
                    264: their primary operating system. <p>
                    265:
                    266: <li><a href="http://www.umn.edu/">The University of Minnesota</a><br>
                    267: This university uses OpenBSD on Sun Sparc workstations for network monitoring
                    268: and capacity planning.  They query 53,000 (as of May 1999) different interfaces
                    269: via SNMP, logging more than 250MB of SNMP data to concatenated disk for
                    270: processing each month.<p>
1.55      louis     271:
1.56      louis     272: <li><u>Uppsala University Hospital, Department of Infectious Diseases</u><br>
                    273: The department uses OpenBSD for intranet servers, as well as for firewalls and
                    274: gateways to the Internet.
1.55      louis     275: <p>
                    276:
1.82      millert   277: <li>Warsaw University's <a href="http://www.chem.uw.edu.pl/">Department of Chemistry</a><br>
                    278: The Department uses OpenBSD for Firewalls, Mail servers, DNS servers,
                    279: web servers, squid proxies, file servers and more.  The deployment
                    280: supports more than 1,000 students.
                    281: <p>
                    282:
1.92      millert   283: <li><a href="http://www.xscanners.org/">Xscanners Information Warfare Center</a><br>
1.99      millert   284: Xscanners IWC is geared toward many different aspect of Information
1.92      millert   285: and Cyber war dealing with topics and discussions that are very
1.99      millert   286: relevant in todays post 9/11 world.  Xscanners builds and designs
1.98      millert   287: secured environments using OpenBSD for many different areas.
                    288: We also have Security Discussion boards.
1.92      millert   289: <p>
                    290:
1.79      jufi      291: </ul>
1.56      louis     292:
1.79      jufi      293: <h2><font color="#e00000"><a name="com">Commercial Users</a></font></h2>
1.44      deraadt   294:
1.79      jufi      295: <ul>
1.56      louis     296: <li><a href="http://www.adobe.com/">Adobe Systems</a><br>
                    297: This software giant uses OpenBSD on a number of their network firewalls
                    298: and network testing systems.<p>
1.23      jkatz     299:
1.43      deraadt   300: <li><a href="http://www.alteon.com">Alteon Networks</a><br>
                    301: The gigabit ethernet
1.22      jkatz     302: hardware manufacturer, uses OpenBSD machines in varying capacities ranging
1.33      deraadt   303: from testbeds to gateways.<p>
1.22      jkatz     304:
1.107     nick      305: <li><a href="http://www.armorlogic.com/">Armorlogic</a><br>
                    306: Proactive and positive information security company uses OpenBSD internally
                    307: for infrastructure purposes.
1.120     tom       308: Furthermore, Armorlogic uses OpenBSD as the core of its flagship
1.107     nick      309: product Profense, an all-purpose web application firewall.<p>
                    310:
1.123     deanna    311: <li><a href="http://www.cebatech.com/">CebaTech</a><br>
                    312: CebaTech Inc. develops tools and intellectual property modules that accelerate
                    313: the development and realization of software algorithms and complex communication
                    314: protocols into silicon.  CebaTech uses OpenBSD as the source for development of
                    315: hardware modules that go into chips and FPGAs.<p>
                    316:
1.43      deraadt   317: <li><a href="http://www.core-sdi.com">CORE SDI S.A.</a><br>
                    318: An Information Security company based in Buenos Aires, Argentina uses OpenBSD
                    319: as the main platform for operation and development of information security related
1.12      ivan      320: products. &quot;The robustness, portability and commitment to security
1.14      todd      321: of OpenBSD, as well as the ability to run on different hardware platforms,
                    322: provides an ideal operating system for environments where security and high
1.56      louis     323: availability are major concerns&quot;, says Ivan Arce, CORE SDI's CEO.<p>
1.43      deraadt   324:
1.125     deanna    325: <li><a href="http://www.demosphere.com/">Demosphere International, Inc.</a><br>
                    326: Demosphere International, Inc. provides secure member registration, credit card
                    327: processing, and statistical content for soccer clubs, leagues, and national
                    328: governing bodies. OpenBSD is employed for redundant firewall failover capability
                    329: (CARP and pfsync), as well as dedicated servers for syslog (including webalyzer),
                    330: DNS, and email broadcasting using Postfix.<p>
                    331:
1.135     reyk      332: <li><a href="http://www.esdenera.com">Esdenera Networks GmbH</a><br>
                    333: Esdenera Networks is a vendor of OpenBSD-based security appliances,
                    334: virtual firewalls, and SDN products.<p>
                    335:
1.131     schwarze  336: <li><a href="http://www.genua.eu/">genua mbh</a><br>
                    337: genua, a company specialized in IT security based in Munich, uses OpenBSD
1.106     saad      338: for its sophisticated firewall solutions and VPN appliances.<p>
                    339:
1.56      louis     340: <li><a href="http://www.fscinternet.com">FSC Internet Corp.</a><br>
                    341: A large Information Security and Internet development firm located in
                    342: Toronto, has used OpenBSD and its IPsec support to construct
                    343: a secure and flexible VPN for a multi-billion dollar client.  "We are
                    344: delighted with OpenBSD's performance, reliability, and pro-active
                    345: attitude towards security," says a company spokesperson. "We intend
                    346: to use OpenBSD in many future projects.  We believe strongly that
                    347: open-source solutions like OpenBSD are best able to provide the high
                    348: levels of security our clients require -- closed-source software
                    349: almost never receives the level of code review that OpenBSD is
                    350: committed to."<p>
1.54      louis     351:
1.94      millert   352: <li><a href="http://www.learningtree.com/">Learning Tree International</a><br>
                    353: Learning Tree International, the leading vendor-independent training company,
                    354: uses OpenBSD in some of their security and firewall courses.
1.90      ian       355: <p>
                    356:
1.123     deanna    357: <li><a href="http://www.loligo.com/">Loligo Cache Systems</a><br>
                    358: Loligo Cache Systems uses OpenBSD as a <em>'fire-and-forget'</em> platform for
                    359: hosting web, mail, and streaming video services.  <i>"OpenBSD has provided us
                    360: with more than 10 years of worry-free infrastructure support and excellent
                    361: performance, with an ethos that just makes more sense to us than any
                    362: other platform."</i><p>
                    363:
1.94      millert   364: <li><a href="http://www.netfriend.org/">NetFriend Ltd.</a><br>
                    365: NetFriend Ltd. is a Polish Service Provider of OpenBSD servers, web
1.98      millert   366: hosting and development, domain name services, e-Commerce solutions,
                    367: dedicated servers, database and application services.<p>
1.94      millert   368:
1.123     deanna    369: <li><a href="http://www.netthruput.com/">NetThruPut, Inc.</a><br>
                    370: NetThruPut, Inc. is the North American leader in internet-based
                    371: crude oil trading systems. OpenBSD is used for its fail-over abilities,
                    372: as well as bridging, intrusion detection and connecting remote offices
                    373: and users securely.<p>
                    374:
1.56      louis     375: <li><a href="http://www.netsec.net/">Network Security Technologies, Inc.</a><br>
                    376: This network and computer security firm uses OpenBSD for high speed
                    377: intrusion detection, virtual private networking, and data warehousing
                    378: applications.  Network Security Technologies, Inc is located in the
                    379: Washington DC metro area, and uses OpenBSD at several undisclosed
                    380: military and government agency locations.<p>
1.43      deraadt   381:
1.56      louis     382: <li><a href="http://www.softquad.com/">SoftQuad Software Inc.</a><br>
                    383: This maker of HTML and XML editing software uses OpenBSD for their
                    384: gateway/firewall and FTP services.<p>
1.12      ivan      385:
1.123     deanna    386: <li><a href="http://www.talkplus.com/">TalkPlus</a><br>
                    387: TalkPlus provides advanced Voice 2.0 services over mobile networks.  The
                    388: company uses OpenBSD as secure mail and DNS platforms, in various places
                    389: where there are requirements of exposing systems to the public Internet.
                    390: <i>"We've found that OpenBSD had the best ease of installation and high
                    391: security we were looking for."</i><p>
                    392:
1.94      millert   393: <li><a href="http://www.third-net.com/">Third-Net.Com</a><br>
1.98      millert   394: Third-Net.Com is a solution provider in Calgary.  Many of our clients
1.120     tom       395: have switched to OpenBSD for their firewall/VPN due to its speed,
1.94      millert   396: stability, and security.<p>
                    397:
1.78      millert   398: <li><a href="http://www.touchtunes.com/">TouchTunes</a><br>
                    399: TouchTunes is currently the only provider of digital downloading
                    400: jukeboxes to coin-operated machine operators across the U.S.
                    401: TouchTunes relies heavily on OpenBSD for high-traffic FTP servers,
                    402: secure firewalls and VPN connectivity. Internal DNS servers also run on
                    403: OpenBSD.<p>
1.79      jufi      404:
1.56      louis     405: <li><a href="http://www.xtime.com/">Xtime</a><br>
                    406: Xtime's core technology is the Time Inventory Management Engine, or
1.80      jufi      407: TIMEngine &reg;.  This technology brings the benefits of e-commerce to
1.56      louis     408: service merchants everywhere, making their time-based inventory available
                    409: via the web or phone, and delivering powerful new customer relationship
                    410: management capabilities.  Xtime leverages the power of OpenBSD for 75%
                    411: of their mission-critical network infrastructure, which includes Mail
                    412: servers, DNS servers, several VPN/Firewalls, secure logging hosts,
                    413: monitoring/IDS and production web servers.  OpenBSD is the de-facto OS
                    414: used by the Xtime network operations department, boasting a 100% usage
1.92      millert   415: rate amongst the department for desktop workstations.<p>
                    416:
1.79      jufi      417: </ul>
1.1       jkatz     418:
1.79      jufi      419: <h2><font color="#e00000"><a name="isp">Internet Service Providers</a></font></h2>
1.56      louis     420: <p>
                    421: One goal of any ISP is to keep their customers' sites and accounts safe
                    422: from intrusion. OpenBSD's security record speaks for itself, so many
                    423: ISPs use OpenBSD for this reason alone. However, others use OpenBSD for
                    424: many, if not most, of their services.
1.79      jufi      425: <ul>
1.18      deraadt   426:
1.71      ian       427: <li><a href="http://www.anonix.net/">Anonix</a><br>
1.70      ian       428: Anonix is an ISP offering anonymous email, shell, and web hosting
1.133     bentley   429: services.  All of these, plus DNS and billing, are run on OpenBSD.<br>
                    430: <i>"We feel confident in its security, and like its clean, layered approach.
1.70      ian       431: The basic install doesn't have huge amounts of unnecessary baggage; we can
                    432: be sure that everything on our systems belongs there."</i>
                    433: <p>
                    434:
1.94      millert   435: <li><a href="http://www.appws.com/">Appalachian Web Solutions</a><br>
                    436: Appalachian Web Solutions is a Carolina based hosting and web design
                    437: company that utilizes OpenBSD for their enterprise firewall and other
                    438: behind the scenes security functions.
                    439: "After fully evaluating all the options both commercial and open source
                    440: it was an easy decision to use OpenBSD as our firewall and for other
                    441: security services."
                    442: <p>
                    443:
1.110     grunk     444: <li><a href="http://www.bizintegrators.com/">BizIntegrators, Inc.</a><br>
                    445: BizIntegrators, a New York City based web and email hosting provider,
                    446: is using OpenBSD for their entire infrastructure as well as for most of
                    447: the dedicated servers they run for their customers. Servers running
                    448: OpenBSD include all web and email servers, DNS servers, MySQL and
                    449: PostgreSQL servers, firewalls and routers. OpenBSD is stable, secure
                    450: and very consistent, we love it.
                    451: <p>
                    452:
1.56      louis     453: <li><a href="http://www.bsws.de/">BS Web Services</a><br>
                    454: BS Web Services, a german ISP, is using OpenBSD servers for primary and
                    455: secondary DNS (djbdns), primary Web hosting (Apache) and
                    456: primary mail services (qmail-ldap). They also run mission critical
1.68      jsyn      457: LDAP Authentication Backend on OpenBSD (OpenLDAP), as well as MySQL databases.
1.56      louis     458: Hostmaster Henning Brauer writes:<br>
                    459: <i>"OpenBSD needed some tuning on these machines, especially bigger maxprocs
1.58      louis     460: and maxfiles, but it handles extraordinary loads on ordinary hardware. We are
                    461: using AMD Athlons (mostly the new Thunderbirds) and AMD K6-III's. We also have
                    462: some internal machines running OpenBSD as testbeds and printservers and all
                    463: sorts of other purposes. We plan to move some more machines to OpenBSD,
                    464: especially our firewalls. Unfortunately we are still running some closed
                    465: source software, but we'd like to try the Linux emulation. OpenBSD's
                    466: behaviour under high load, especially under DoS attacks, just doesn't
                    467: compare to the Linux we used before - Linux went extremely slow, while
                    468: OpenBSD doesn't even care (same hardware!)"</i>.
1.56      louis     469: <p>
                    470:
                    471: <li><a href="http://www.calyx.net">Calyx Internet Access Corp.</a><br>
                    472: This company uses OpenBSD for running all mission-critical services
                    473: including WWW, FTP, email, VPN traffic, and network monitoring at its
                    474: data centers in New York, Los Angeles, and Amsterdam.  Even larger web
                    475: sites such as
                    476: <a href="http://www.snapple.com">snapple.com</a>,
                    477: <a href="http://www.tanqueray.com">tanqueray.com</a> and others are no
                    478: challenge for OpenBSD.<p>
1.1       jkatz     479:
1.80      jufi      480: <li><a href="http://c2pro.net">C2PRO</a><br>
1.77      millert   481: C2PRO is an Indonesian internet service provider using OpenBSD for their
                    482: web, mail, shell and network monitoring servers.<p>
                    483:
1.94      millert   484: <li><a href="http://www.compartment.se/">Compartment</a><br>
                    485: Compartment is a Swedish ISP that uses OpenBSD for many of its
                    486: production and development servers as well as mail, web and
                    487: routers.
                    488: <p>
                    489:
1.80      jufi      490: <li><a href="http://www.crown.net">Crown.Net</a><br>
1.43      deraadt   491: This internet service provider is running almost completely on
1.24      deraadt   492: a mixture of OpenBSD/sparc and OpenBSD/i386.  Our Web Servers(2), Mail
                    493: Server, Primary and Secondary DNS, and Radius servers all are running
                    494: OpenBSD/sparc and our shell server and several co-located servers are
1.33      deraadt   495: running OpenBSD/i386.<p>
1.24      deraadt   496:
1.122     grunk     497: <li><a href="http://www.reverse.net/">Reverse.Net (former Elixor Networks)</a><br>
                    498: Reverse.Net uses OpenBSD on AMD hardware to provide shell accounts,
1.56      louis     499: website hosting, and domain name hosting.
                    500: <p>
1.25      angelos   501:
1.56      louis     502: <li><a href="http://www.empirenet.net/">Empire Net</a><br>
                    503: An ISP in Bend, Oregon, uses OpenBSD on AMD, Intel, and Sun based hardware,
1.72      miod      504: for routing, firewalling, IPsec (VPN), <A
1.56      louis     505: HREF="http://www.csl.sony.co.jp/person/kjc/software.html#ALTQ">bandwidth
                    506: limiting</a>, web hosting, database servers, network monitoring, intrusion
                    507: detection, mail servers, backup servers, cache servers, and workstations.
                    508: One of their OpenBSD routers handles traffic on between a T3 and eight fast
                    509: ethernet ports, also with several 802.1Q VLANs to separate networks for
1.62      chris     510: co-location customers and business park tenants.  An OpenBSD mail server
1.138   ! mmcc      511: handles email storage/retrieval and RADIUS authentication for over 5,000 users.
1.104     david     512: Several OpenBSD web servers each handle over 300 web sites.<p>
1.27      ian       513:
1.63      louis     514: <li><a href="http://www.globalwire.se/">Globalwire Communications</a><br>
                    515: Globalwire Communications  is using OpenBSD on their Short Message
                    516: Service (SMS) gateway and database servers.
                    517: <p>
                    518:
1.43      deraadt   519: <li><a href="http://www.hobbiton.org/">Hobbiton.org</a><br>
1.73      ian       520: This ISP used OpenBSD to run their free shell server for many years
1.74      ian       521: (it was shut down in November, 2001 due to rising costs of running
1.73      ian       522: a "free" service). They also use OpenBSD on other systems.
                    523: The shell server, a single AMD Athlon 650, handled at the end
                    524: 101,796 users. "We tried OpenBSD after having constant security
                    525: problems with other operating systems", said Hobbiton's Leif
1.43      deraadt   526: Pedersen. "Since then, security in the operating system has not been a
                    527: problem and, as an added bonus, the systems have been more stable."
1.37      louis     528: <p>
1.34      deraadt   529:
1.94      millert   530: <li><a href="http://www.info-time.nl/">Infotime</a><br>
                    531: Infotime, located in the Netherlands, offers webhosting services
                    532: and domain name registration on servers running OpenBSD.  We find
                    533: OpenBSD to be the most reliable and secure operating system on which
                    534: to offer services.
                    535: <p>
                    536:
                    537: <li><a href="http://www.networkinformation.com/">inTEXT Communications</a><br>
                    538: inTEXT Communications is a network security company that uses OpenBSD for
                    539: firewalls, virtual private networking, as well as various high end security
                    540: systems. inTEXT Communications Inc (1994) is located in Vancouver, BC,
                    541: Canada and deploys OpenBSD for several high profile companies including a
                    542: pharmaceutical firm.
                    543: <p>
                    544:
1.56      louis     545: <li><a href="http://www.ioactive.com/">IOActive</a><br>
                    546: IOActive provides WWW developers and hackers with a place to tinker on test
                    547: servers.  The Seattle, WA, service provider also installs OpenBSD firewall,
                    548: VPN and IDS systems for regional businesses. "OpenBSD is fast, reliable, and I
                    549: sleep a little better at night knowing I'm using it," says owner Josh Pennell.
                    550: "The other thing I love about it is over half of the work is done to secure
                    551: the box right after installation, saving my company copious amounts of time.
                    552: OpenBSD in my mind is the defacto standard for open source secure operating
                    553: systems.  Everyone else is just trying to catch up".<p>
                    554:
1.111     grunk     555: <li><a href="http://www.m5hosting.com/">M5 Internet Hosting</a><br>
                    556: M5 is a commercial Hosting, Colocation and Dedicated Server
                    557: provider. They use OpenBSD for security devices including firewalls
                    558: (pf), bandwidth control (pf and altq), load balancing (pf), IDS and
                    559: front line spam filtering systems (postfix, spamd). They also offer
                    560: <a href="http://www.m5hosting.com/openbsd-dedicated-server.php">OpenBSD dedicated servers</a>
                    561: for rent.<br>
                    562: M5 has many customers who use these
                    563: OpenBSD systems as development platforms, web and email hosting
                    564: platforms, security auditing launch points, and shell boxes to get
                    565: around unfriendly security policies at their places of employment.<br>
                    566: Michael J. McCafferty, Principal and Security Engineer of the company
                    567: says about OpenBSD: "Thank you very much for an awesome OS !"<p>
                    568:
1.105     ian       569: <li><a href="http://www.meteksan.net.tr/">Meteksan Net
                    570: Communication Services Inc.</a><br>
                    571: Probably Turkey's largest corporate-only ISP, Meteksan uses OpenBSD
                    572: in many of its own mission critical services and also creates
                    573: turnkey network security solutions built upon OpenBSD to customers
                    574: from government and private sector.
                    575: <p>
                    576:
1.94      millert   577: <li><a href="http://www.phoenixcomm.net">Phoenix Communications</a><br>
                    578: Phoenix Communications is an ISP in Dallas, Texas, that uses OpenBSD
                    579: for firewalls and other infrastructure.
                    580: <p>
                    581:
1.80      jufi      582: <li><a href="http://www.poppe.com">Poppe Tyson Europe</a>
1.56      louis     583: is using OpenBSD as a primary DNS, mailserver for
                    584: 100+ mailboxes, and as their Website Development server for over 50
                    585: sites.<p>
                    586:
                    587: <li><a href="http://www.qpalzm.com">qpalzm.com services</a><br>
                    588: qpalzm services runs OpenBSD to offer web hosting and shell accounts. The
                    589: website offers daily updates on programming, gaming, irc, and other
                    590: technobabble. An online MUD is also available. There is also a
                    591: <a href="http://www.jscript.org">JavaScript Mailing List</a>
                    592: using OpenBSD for the benefit of those interested in JavaScript
                    593: and DHTML. Incidently, qpalzm.com's busy WWW, FTP and mail server runs
                    594: just fine with OpenBSD on a 200MHz Pentium Pro.<p>
                    595:
                    596: <li><a href="http://www.rtmx.net">RTMX Networking Services</a><br>
                    597: This North Carolina ISP is using OpenBSD on multiple servers for Web,
1.138   ! mmcc      598: DNS and over 1000 email users in their community just West of
1.56      louis     599: Research Triangle. There is a mix of AMD K-6, MicroSPARC-II and
                    600: PowerPC systems in use, with more customer sub-net servers coming
                    601: on-line. RTMX.NET mirrors the OpenBSD
                    602: <a href="http://openbsd.groupbsd.org">WWW</a>
                    603: and <a href="ftp://openbsd.groupbsd.org/pub/OpenBSD/">ftp</a> sites,
                    604: and also provides an anonymous CVS repository
                    605: (CVSROOT=anoncvs@openbsd.groupbsd.org:/cvs), all thanks to 47GB of
                    606: disk space and a dedicated T1 connection.<p>
                    607:
1.61      louis     608: <li><a href="http://start.swebase.com/?sida=maskiner">Swebase Network</a><br>
                    609: This ISP in Sweden uses OpenBSD for Web, DNS and mail servers.
                    610: <p>
                    611:
1.101     jose      612: <li><a href="http://www.tronicguard.com/">TronicGuard GmbH</a><br>
                    613: This ISP and hosting company located in Germany uses OpenBSD for
                    614: hosting and all-purpose systems, as well as security appliances like
                    615: firewalls and database-servers to small and midrange companies.
                    616: <p>
                    617:
1.129     tobias    618: <li><a href="http://www.vovoid.com">Vovoid Software &amp; Multimedia.</a><br>
                    619: Vovoid Software &amp; Multimedia in Gothenburg, Sweden runs OpenBSD for
1.76      millert   620: Firewalls, Web Servers, Mail Servers and DNS Servers. "The choice
                    621: of OpenBSD for our production servers is obvious and an important
                    622: keystone in our security strategy."
                    623: <p>
                    624:
1.94      millert   625: <li><a href="http://www.wythenet.com">WytheNet, Inc.</a><br>
                    626: This Virginia ISP uses OpenBSD on all of its servers, including primary and
                    627: secondary radius, primary and secondary DNS, mail, network monitoring, and
                    628: several firewalls.  They also sell OpenBSD based routers and firewalls to
                    629: their business DSL customers.
1.93      millert   630: <p>
                    631:
1.79      jufi      632: </ul>
1.6       downsj    633:
                    634: </body>
1.1       jkatz     635: </html>