Annotation of www/users.html, Revision 1.56
1.1 jkatz 1: <html>
2: <head>
1.18 deraadt 3: <meta name=KEYWORDS content="OpenBSD,commercial,operating system,Unix,Un*x,BSD,linux,secure,secure,secure">
4: <title>OpenBSD at work</title>
1.1 jkatz 5: </head>
6:
1.5 deraadt 7: <BODY BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#23238E">
1.21 pauls 8: <img alt="[OpenBSD]" height=30 width=141 SRC="images/smalltitle.gif">
1.6 downsj 9: <p>
1.41 deraadt 10: <h2><font color=#e00000>Users</font><hr></h2>
1.47 ian 11: The term "users" has several connotations. <EM>End users</EM> often
12: want to meet other users of the system, to share ideas, problems and solutions,
13: and discuss the system over a meal or a beer. One of the best ways to do this
14: is with one of our
15: <a href="groups.html">User Groups worldwide</a>.
16: <p>
17: Another connotation of the term is "who is using the system, and for what?",
1.56 ! louis 18: and that is the subject of the rest of this page. These <a
! 19: href="#com">companies</a> and organisations trust OpenBSD's rigorous code audit
1.38 louis 20: and security-first development model. They use the system to build firewalls,
1.56 ! louis 21: intrusion detection systems, or general purpose servers.
! 22: <a href="#edu">University researchers</a> and IT department developers often
! 23: have similar security and stability requirements and choose OpenBSD.
! 24: Many <a href="#isp">Internet Service Providers</a> find OpenBSD's
! 25: security features hard to resist.
! 26: <p>
1.38 louis 27:
28: If you would like to be listed on this page, send the information to
29: <a href="mailto:press@openbsd.org">press@openbsd.org</a> .
30: <br><br>
31:
32: <i><b>NOTE:</b> For reasons of security, companies can ask us to withhold
33: their names, or those of their clients. They would then appear as
34: "Undisclosed Company".</i><br><br>
1.1 jkatz 35: <hr>
36:
1.56 ! louis 37: <h2><font color=#e00000><a name="edu">Research and other Non-Commercial Users</a></font></h2>
1.43 deraadt 38: <dl>
1.27 ian 39:
1.50 louis 40: <li><a href="http://www.amnesty.org/">Amnesty International</a><br>
41: Amnesty International is a worldwide campaigning movement that works
42: to promote all the human rights enshrined in the Universal Declaration of
43: Human Rights and other international standards.
44: Amnesty International is using OpenBSD for network firewalls and for
45: Virtual Private Networks (IPSec) between its sections around the world.<p>
46:
1.56 ! louis 47: <li><u>Prague Institute of Chemical Technology, Czech Republic</u><br>
! 48: The university uses OpenBSD on PCs to provide WWW, mail and shell access to
! 49: staff and students, and on a SPARC IPX for a time server and secondary DNS.
! 50: The admin stations also run PCs with OpenBSD.
! 51: <p>
1.43 deraadt 52:
1.53 louis 53: <li><a href="http://www.ceesonora.org.mx">Sonora State Electoral Council,
54: México</a><br>
55: El Consejo Estatal Electoral del Estado de Sonora usa OpenBSD para proteger
1.56 ! louis 56: sus sistemas, estas aplicaciones estan en linea a traves de Internet, dando
1.53 louis 57: resultados electorales al usuario, su red privada esta protegida por
58: usuarios internos y externos.<br>
59: <i>This government agency uses OpenBSD as a means to protect its
60: network as well as for intrusion detection. The OpenBSD based VPN
61: provides online electoral results to both internal and external users.</i>
62: <p>
63:
1.56 ! louis 64: <li><a href="http://www.ualberta.ca/">The University of Alberta</a><br>
! 65: uses OpenBSD on SPARC and Intel hardware for proxy servers, Kerberos
! 66: servers, print servers, service monitoring, pre-emptive security
! 67: scanning, and incident response. OpenBSD on Intel Hardware is used
! 68: for Firewalls and Lan-to-Lan VPN for the university's secured subnets
! 69: behind which all the University's new administrative systems
! 70: reside. OpenBSD is used for <A
! 71: HREF="http://www.ualberta.ca/~beck/authgw.html">authenticating
! 72: gateways</A> in front of public labs and public ethernet jacks in
! 73: approximately 40 locations across campus (about 1500 seats) to help
! 74: secure public internet access. The Department of Computing Science is using two
! 75: 20 seat OpenBSD labs for undergraduate instruction.<p>
! 76:
! 77: <li>The University of Michigan's <a href="http://www.citi.umich.edu/">
! 78: Center for Information Technology Integration (CITI)</a><br>
! 79: The CITI laboratory uses OpenBSD as the basis
! 80: for many intensive research projects.
! 81: OpenBSD is used for developing and analyzing
! 82: <a href= "http://www.citi.umich.edu/projects/sinciti/smartcard/">smart card</a>
! 83: contents and protocols, both in isolation and in real
! 84: applications. Plans are underway to issue cards
! 85: containing secure tokens for user logins and kerberos ticket acquisition.
! 86: OpenBSD is also used as a test platform for the
! 87: <a href= "http://www.citi.umich.edu/projects/mobile.html">mobile computing</a>
! 88: program at CITI. Internally "The Packet Vault" is an
! 89: OpenBSD machine that captures and records on cd-rom every packet on the
! 90: local 10 Mbps ethernet. Packet contents are encrypted to comply with
! 91: privacy requirements. This practice is used for intrusion detection. In
! 92: addition, a number of people within the department are using OpenBSD as
! 93: their primary operating system. <p>
! 94:
! 95: <li><a href="http://www.umn.edu/">The University of Minnesota</a><br>
! 96: This university uses OpenBSD on Sun Sparc workstations for network monitoring
! 97: and capacity planning. They query 53,000 (as of May 1999) different interfaces
! 98: via SNMP, logging more than 250MB of SNMP data to concatenated disk for
! 99: processing each month.<p>
1.55 louis 100:
1.56 ! louis 101: <li><u>Uppsala University Hospital, Department of Infectious Diseases</u><br>
! 102: The department uses OpenBSD for intranet servers, as well as for firewalls and
! 103: gateways to the Internet.
1.55 louis 104: <p>
105:
1.56 ! louis 106: </dl>
! 107:
! 108: <h2><font color=#e00000><a name="com">Commercial Users</a></font></h2>
1.44 deraadt 109:
1.56 ! louis 110: <dl>
! 111: <li><a href="http://www.adobe.com/">Adobe Systems</a><br>
! 112: This software giant uses OpenBSD on a number of their network firewalls
! 113: and network testing systems.<p>
1.23 jkatz 114:
1.43 deraadt 115: <li><a href="http://www.alteon.com">Alteon Networks</a><br>
116: The gigabit ethernet
1.22 jkatz 117: hardware manufacturer, uses OpenBSD machines in varying capacities ranging
1.33 deraadt 118: from testbeds to gateways.<p>
1.22 jkatz 119:
1.43 deraadt 120: <li><a href="http://www.core-sdi.com">CORE SDI S.A.</a><br>
121: An Information Security company based in Buenos Aires, Argentina uses OpenBSD
122: as the main platform for operation and development of information security related
1.12 ivan 123: products. "The robustness, portability and commitment to security
1.14 todd 124: of OpenBSD, as well as the ability to run on different hardware platforms,
125: provides an ideal operating system for environments where security and high
1.56 ! louis 126: availability are major concerns", says Ivan Arce, CORE SDI's CEO.<p>
1.43 deraadt 127:
1.56 ! louis 128: <li><a href="http://www.fscinternet.com">FSC Internet Corp.</a><br>
! 129: A large Information Security and Internet development firm located in
! 130: Toronto, has used OpenBSD and its IPsec support to construct
! 131: a secure and flexible VPN for a multi-billion dollar client. "We are
! 132: delighted with OpenBSD's performance, reliability, and pro-active
! 133: attitude towards security," says a company spokesperson. "We intend
! 134: to use OpenBSD in many future projects. We believe strongly that
! 135: open-source solutions like OpenBSD are best able to provide the high
! 136: levels of security our clients require -- closed-source software
! 137: almost never receives the level of code review that OpenBSD is
! 138: committed to."<p>
1.54 louis 139:
1.56 ! louis 140: <li><a href="http://www.netsec.net/">Network Security Technologies, Inc.</a><br>
! 141: This network and computer security firm uses OpenBSD for high speed
! 142: intrusion detection, virtual private networking, and data warehousing
! 143: applications. Network Security Technologies, Inc is located in the
! 144: Washington DC metro area, and uses OpenBSD at several undisclosed
! 145: military and government agency locations.<p>
1.43 deraadt 146:
147: <li><a href="http://www.rtmx.com">RTMX Incorporated</a><br>
148: This vendor produces an OpenBSD derived, IEEE POSIX real time extended
149: system solution. RTMX fully re-implemented previously developed
150: in-house IEEE POSIX realtime extensions using OpenBSD as a root source
151: tree. Nearly all of the IEEE POSIX extensions have been
152: added. Currently all OpenBSD features are supported, but only on the
153: m68k, MIPS and PowerPC cpu types. Pentium and Alpha cpu versions are
154: to be released soon. RTMX Inc. is also a licensed OSF Motif house, and
155: has ported Motif 1.2.3 to most of the supported platforms.<p>
156:
1.56 ! louis 157: <li><a href="http://www.softquad.com/">SoftQuad Software Inc.</a><br>
! 158: This maker of HTML and XML editing software uses OpenBSD for their
! 159: gateway/firewall and FTP services.<p>
1.12 ivan 160:
1.56 ! louis 161: <li><a href="http://www.xtime.com/">Xtime</a><br>
! 162: Xtime's core technology is the Time Inventory Management Engine, or
! 163: TIMEngine ™. This technology brings the benefits of e-commerce to
! 164: service merchants everywhere, making their time-based inventory available
! 165: via the web or phone, and delivering powerful new customer relationship
! 166: management capabilities. Xtime leverages the power of OpenBSD for 75%
! 167: of their mission-critical network infrastructure, which includes Mail
! 168: servers, DNS servers, several VPN/Firewalls, secure logging hosts,
! 169: monitoring/IDS and production web servers. OpenBSD is the de-facto OS
! 170: used by the Xtime network operations department, boasting a 100% usage
! 171: rate amongst the department for desktop workstations.
! 172: <p>
1.29 deraadt 173:
1.56 ! louis 174: </dl>
1.1 jkatz 175:
1.56 ! louis 176: <h2><font color=#e00000><a name="isp">Internet Service Providers</a></font></h2>
! 177: <p>
! 178: One goal of any ISP is to keep their customers' sites and accounts safe
! 179: from intrusion. OpenBSD's security record speaks for itself, so many
! 180: ISPs use OpenBSD for this reason alone. However, others use OpenBSD for
! 181: many, if not most, of their services.
! 182: <dl>
1.18 deraadt 183:
1.56 ! louis 184: <li><a href="http://www.bsws.de/">BS Web Services</a><br>
! 185: BS Web Services, a german ISP, is using OpenBSD servers for primary and
! 186: secondary DNS (djbdns), primary Web hosting (Apache) and
! 187: primary mail services (qmail-ldap). They also run mission critical
! 188: LDAP Authentification Backend on OpenBSD (OpenLDAP), as well as MySQL databases.
! 189: Hostmaster Henning Brauer writes:<br>
! 190: <i>"OpenBSD needed some tuning on these machines, especially bigger maxprocs
! 191: and maxfiles, but it runs great on hardware that's not so speedy. We are using
! 192: AMD Athlons (mostly the new Thunderbirds) and AMD K6-III's. We also have some
! 193: internal machines running OpenBSD as testbeds and printservers and all sorts of
! 194: other purposes. We plan to move some more machines to OpenBSD, especially our
! 195: firewalls. Unfortunately we are still running some closed source software, but
! 196: we'd like to try the Linux emulation. OpenBSD's behaviour under high load,
! 197: especially under DoS attacks, just doesn't compare to the Linux we used before
! 198: - Linux went extremely slow, while OpenBSD doesn't even care (same
! 199: hardware!)"</i>.
! 200: <p>
! 201:
! 202: <li><a href="http://www.calyx.net">Calyx Internet Access Corp.</a><br>
! 203: This company uses OpenBSD for running all mission-critical services
! 204: including WWW, FTP, email, VPN traffic, and network monitoring at its
! 205: data centers in New York, Los Angeles, and Amsterdam. Even larger web
! 206: sites such as
! 207: <a href="http://www.snapple.com">snapple.com</a>,
! 208: <a href="http://www.tanqueray.com">tanqueray.com</a> and others are no
! 209: challenge for OpenBSD.<p>
1.1 jkatz 210:
1.43 deraadt 211: <li><a href=http://www.crown.net>Crown.Net</a><br>
212: This internet service provider is running almost completely on
1.24 deraadt 213: a mixture of OpenBSD/sparc and OpenBSD/i386. Our Web Servers(2), Mail
214: Server, Primary and Secondary DNS, and Radius servers all are running
215: OpenBSD/sparc and our shell server and several co-located servers are
1.33 deraadt 216: running OpenBSD/i386.<p>
1.24 deraadt 217:
1.56 ! louis 218: <li><a href="http://www.elixor.net/">Elixor Networks Inc.</a><br>
! 219: Elixor Networks uses OpenBSD on AMD hardware to provide shell accounts,
! 220: website hosting, and domain name hosting.
! 221: <p>
1.25 angelos 222:
1.56 ! louis 223: <li><a href="http://www.empirenet.net/">Empire Net</a><br>
! 224: An ISP in Bend, Oregon, uses OpenBSD on AMD, Intel, and Sun based hardware,
! 225: for routing, firewalling, IPSec/VPN, <A
! 226: HREF="http://www.csl.sony.co.jp/person/kjc/software.html#ALTQ">bandwidth
! 227: limiting</a>, web hosting, database servers, network monitoring, intrusion
! 228: detection, mail servers, backup servers, cache servers, and workstations.
! 229: One of their OpenBSD routers handles traffic on between a T3 and eight fast
! 230: ethernet ports, also with several 802.1Q VLANs to separate networks for
! 231: co-location customers and business park tenants.<P>
1.27 ian 232:
1.43 deraadt 233: <li><a href="http://www.hobbiton.org/">Hobbiton.org</a><br>
234: This ISP uses OpenBSD to run their free shell server, as well as other
235: systems. The shell server, a single AMD K6/233, handles well over
236: 10,000 users. "We tried OpenBSD after having constant security
237: problems with other operating systems", says Hobbiton's Leif
238: Pedersen. "Since then, security in the operating system has not been a
239: problem and, as an added bonus, the systems have been more stable."
1.37 louis 240: <p>
1.34 deraadt 241:
1.56 ! louis 242: <li><a href="http://www.hurontario.net">Hurontario.net</a><br>
! 243: In the Headwaters region of Ontario, Canada, Hurontario.net uses OpenBSD
! 244: on several of their own and their customers' machines.
! 245: <p>
! 246:
! 247: <li><a href="http://www.ioactive.com/">IOActive</a><br>
! 248: IOActive provides WWW developers and hackers with a place to tinker on test
! 249: servers. The Seattle, WA, service provider also installs OpenBSD firewall,
! 250: VPN and IDS systems for regional businesses. "OpenBSD is fast, reliable, and I
! 251: sleep a little better at night knowing I'm using it," says owner Josh Pennell.
! 252: "The other thing I love about it is over half of the work is done to secure
! 253: the box right after installation, saving my company copious amounts of time.
! 254: OpenBSD in my mind is the defacto standard for open source secure operating
! 255: systems. Everyone else is just trying to catch up".<p>
! 256:
! 257: <li><a href=http://www.poppe.com>Poppe Tyson Europe</a>
! 258: is using OpenBSD as a primary DNS, mailserver for
! 259: 100+ mailboxes, and as their Website Development server for over 50
! 260: sites.<p>
! 261:
! 262: <li><a href="http://www.qpalzm.com">qpalzm.com services</a><br>
! 263: qpalzm services runs OpenBSD to offer web hosting and shell accounts. The
! 264: website offers daily updates on programming, gaming, irc, and other
! 265: technobabble. An online MUD is also available. There is also a
! 266: <a href="http://www.jscript.org">JavaScript Mailing List</a>
! 267: using OpenBSD for the benefit of those interested in JavaScript
! 268: and DHTML. Incidently, qpalzm.com's busy WWW, FTP and mail server runs
! 269: just fine with OpenBSD on a 200MHz Pentium Pro.<p>
! 270:
! 271: <li><a href="http://www.rtmx.net">RTMX Networking Services</a><br>
! 272: This North Carolina ISP is using OpenBSD on multiple servers for Web,
! 273: DNS and over 1000 e-mail users in their community just West of
! 274: Research Triangle. There is a mix of AMD K-6, MicroSPARC-II and
! 275: PowerPC systems in use, with more customer sub-net servers coming
! 276: on-line. RTMX.NET mirrors the OpenBSD
! 277: <a href="http://openbsd.groupbsd.org">WWW</a>
! 278: and <a href="ftp://openbsd.groupbsd.org/pub/OpenBSD/">ftp</a> sites,
! 279: and also provides an anonymous CVS repository
! 280: (CVSROOT=anoncvs@openbsd.groupbsd.org:/cvs), all thanks to 47GB of
! 281: disk space and a dedicated T1 connection.<p>
! 282:
! 283: <li><a href="http://www.wythenet.com">WytheNet, Inc.</a><br>
! 284: This Virginia ISP uses OpenBSD on all of its servers, including primary and
! 285: secondary radius, primary and secondary DNS, mail, network monitoring, and
! 286: several firewalls. They also sell OpenBSD based routers and firewalls to
! 287: their business DSL customers.
1.46 louis 288: <p>
289:
1.43 deraadt 290: </dl>
291:
1.6 downsj 292: <hr>
1.21 pauls 293: <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
1.6 downsj 294: <a href=mailto:www@openbsd.org>www@openbsd.org</a>
1.56 ! louis 295: <br><small>$OpenBSD: users.html,v 1.55 2000/10/03 23:22:30 louis Exp $</small>
1.6 downsj 296:
297: </body>
1.1 jkatz 298: </html>