Annotation of www/users.html, Revision 1.91
1.79 jufi 1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
1.1 jkatz 2: <html>
3: <head>
1.18 deraadt 4: <title>OpenBSD at work</title>
1.88 jufi 5: <link rev=made href="mailto:www@openbsd.org">
6: <meta name="resource-type" content="document">
7: <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
1.89 jufi 8: <meta name=keywords content="OpenBSD,users,commercial,operating system,Unix,Un*x,BSD,secure">
1.88 jufi 9: <meta name="distribution" content="global">
10: <meta name="copyright" content="This document copyright 1999-2002 by OpenBSD.">
1.1 jkatz 11: </head>
12:
1.88 jufi 13: <body bgcolor="#ffffff" text="#000000" link="#23238e">
1.81 jsyn 14: <a href="index.html"><img alt="[OpenBSD]" height="30" width="141" src="images/smalltitle.gif" border="0"></a>
1.6 downsj 15: <p>
1.79 jufi 16: <h2><font color="#e00000">Users</font></h2>
17: <hr>
1.47 ian 18: The term "users" has several connotations. <EM>End users</EM> often
19: want to meet other users of the system, to share ideas, problems and solutions,
20: and discuss the system over a meal or a beer. One of the best ways to do this
21: is with one of our
22: <a href="groups.html">User Groups worldwide</a>.
23: <p>
24: Another connotation of the term is "who is using the system, and for what?",
1.56 louis 25: and that is the subject of the rest of this page. These <a
1.65 jufi 26: href="#com">companies</a> and organizations trust OpenBSD's rigorous code audit
1.38 louis 27: and security-first development model. They use the system to build firewalls,
1.56 louis 28: intrusion detection systems, or general purpose servers.
29: <a href="#edu">University researchers</a> and IT department developers often
30: have similar security and stability requirements and choose OpenBSD.
31: Many <a href="#isp">Internet Service Providers</a> find OpenBSD's
32: security features hard to resist.
33: <p>
1.38 louis 34:
35: If you would like to be listed on this page, send the information to
36: <a href="mailto:press@openbsd.org">press@openbsd.org</a> .
37: <br><br>
38:
39: <i><b>NOTE:</b> For reasons of security, companies can ask us to withhold
40: their names, or those of their clients. They would then appear as
41: "Undisclosed Company".</i><br><br>
1.1 jkatz 42: <hr>
43:
1.79 jufi 44: <h2><font color="#e00000"><a name="edu">Research and other Non-Commercial Users</a></font></h2>
45: <ul>
1.27 ian 46:
1.59 jufi 47: <li><A HREF="http://www.iztacala.unam.mx">ENEP Iztacala</A><br>
1.58 louis 48: ENEP Iztacala is one of <A HREF="http://www.unam.mx">UNAM</A>'s peripheral
49: schools. UNAM is Mexico's largest University, with over 250,000 students,
50: and at ENEP Iztacala we have a bit over 10,000 students. This is mostly
51: a health-oriented campus, so the computer area is not a big one.
52: <br>
53: We run as servers currently two OpenBSD, one Solaris and two Linux boxes.
54: With OpenBSD we handle the main web site (happily running on a 7-year old
55: Sparcstation 5), part of our mail accounts and our firewall.
56: <br>
1.65 jufi 57: There are two additional OpenBSD computers, in our development area. One of
1.58 louis 58: them acts as a network monitor (using Snort) and will shortly be moved to
59: sit next to the firewall, and the other one serves as an OpenBSD CVS
60: mirror (<strong>CVSROOT=anoncvs@anoncvs.mx.openbsd.org:/cvs</strong>).
61: <br>
62: We do not do run very creative stuff, we just use OpenBSD for what it does
63: best: run smoothly, even on older hardware, freeing us from most concerns
64: and doubts we have about our other operating systems.
65: <br>
66: We also host a Spanish OpenBSD mailing list (openbsd@tlali.iztacala.unam.mx).
67: <p>
68:
1.66 jufi 69: <li><a href="http://www.hus.fi/group/">Helsinki University Central Hospital, Finland</a><br>
70: The Hospital District of Helsinki and Uusimaa (HUS), with staff totaling approx. 18.000,
71: provides specialized medical care for the residents of the capital and other member
72: local authorities. OpenBSD is used for DNS, mail gateway, VPN and firewall solutions both
73: on the internal campus network and on the Internet.
74: <p>
75:
1.60 louis 76: <li><u>INFN Italian Institute of Nuclear Physics, Florence, Italy</u><br>
77: This non-profit government research and academic institution uses OpenBSD
78: for domain name service and IPF firewall packet filtering.
79: <p>
80:
1.56 louis 81: <li><u>Prague Institute of Chemical Technology, Czech Republic</u><br>
82: The university uses OpenBSD on PCs to provide WWW, mail and shell access to
83: staff and students, and on a SPARC IPX for a time server and secondary DNS.
84: The admin stations also run PCs with OpenBSD.
85: <p>
1.43 deraadt 86:
1.53 louis 87: <li><a href="http://www.ceesonora.org.mx">Sonora State Electoral Council,
88: México</a><br>
89: El Consejo Estatal Electoral del Estado de Sonora usa OpenBSD para proteger
1.56 louis 90: sus sistemas, estas aplicaciones estan en linea a traves de Internet, dando
1.53 louis 91: resultados electorales al usuario, su red privada esta protegida por
92: usuarios internos y externos.<br>
93: <i>This government agency uses OpenBSD as a means to protect its
94: network as well as for intrusion detection. The OpenBSD based VPN
95: provides online electoral results to both internal and external users.</i>
96: <p>
97:
1.56 louis 98: <li><a href="http://www.ualberta.ca/">The University of Alberta</a><br>
99: uses OpenBSD on SPARC and Intel hardware for proxy servers, Kerberos
100: servers, print servers, service monitoring, pre-emptive security
101: scanning, and incident response. OpenBSD on Intel Hardware is used
102: for Firewalls and Lan-to-Lan VPN for the university's secured subnets
103: behind which all the University's new administrative systems
104: reside. OpenBSD is used for <A
105: HREF="http://www.ualberta.ca/~beck/authgw.html">authenticating
106: gateways</A> in front of public labs and public ethernet jacks in
107: approximately 40 locations across campus (about 1500 seats) to help
108: secure public internet access. The Department of Computing Science is using two
109: 20 seat OpenBSD labs for undergraduate instruction.<p>
110:
111: <li>The University of Michigan's <a href="http://www.citi.umich.edu/">
112: Center for Information Technology Integration (CITI)</a><br>
113: The CITI laboratory uses OpenBSD as the basis
114: for many intensive research projects.
115: OpenBSD is used for developing and analyzing
116: <a href= "http://www.citi.umich.edu/projects/sinciti/smartcard/">smart card</a>
117: contents and protocols, both in isolation and in real
118: applications. Plans are underway to issue cards
119: containing secure tokens for user logins and kerberos ticket acquisition.
120: OpenBSD is also used as a test platform for the
121: <a href= "http://www.citi.umich.edu/projects/mobile.html">mobile computing</a>
122: program at CITI. Internally "The Packet Vault" is an
123: OpenBSD machine that captures and records on cd-rom every packet on the
124: local 10 Mbps ethernet. Packet contents are encrypted to comply with
125: privacy requirements. This practice is used for intrusion detection. In
126: addition, a number of people within the department are using OpenBSD as
127: their primary operating system. <p>
128:
129: <li><a href="http://www.umn.edu/">The University of Minnesota</a><br>
130: This university uses OpenBSD on Sun Sparc workstations for network monitoring
131: and capacity planning. They query 53,000 (as of May 1999) different interfaces
132: via SNMP, logging more than 250MB of SNMP data to concatenated disk for
133: processing each month.<p>
1.55 louis 134:
1.56 louis 135: <li><u>Uppsala University Hospital, Department of Infectious Diseases</u><br>
136: The department uses OpenBSD for intranet servers, as well as for firewalls and
137: gateways to the Internet.
1.55 louis 138: <p>
139:
1.76 millert 140: <li><a href="http://www.belperschool.co.uk">Belper School, Belper, Derbyshire, UK</a><br>
141: The Belper School uses OpenBSD machines as Samba file servers for around
142: 1100 students as well as for student web hosting and a firewall/NAT gateway.
143: <p>
144:
145: <li><a href="http://fortthunder.org/music/ff/index.html">"Forcefield" art installation</a><br>
146: Part of the audio and lighting for the <em>Forcefield</em> art installation
147: at the 2002 Biennial exhibition at the Whitney Museum of American Art in
148: New York is being controlled by a VAXstation 3100 running OpenBSD.
149: OpenBSD was chosen because it is simple and reliable.
150: <p>
151:
1.82 millert 152: <li>Warsaw University's <a href="http://www.chem.uw.edu.pl/">Department of Chemistry</a><br>
153: The Department uses OpenBSD for Firewalls, Mail servers, DNS servers,
154: web servers, squid proxies, file servers and more. The deployment
155: supports more than 1,000 students.
156: <p>
157:
1.83 millert 158: <li>The <a href="http://www.jur.lu.se">Law Department</a> of the University of Lund, Sweden<br>
159: The Department uses OpenBSD for Firewalls, NAT, squid proxies and
160: intrusion detection. Their students use the web for applications
1.85 jufi 161: such as internet courses and multimedia lectures, all of which
1.83 millert 162: pass through one or more OpenBSD boxes.
1.84 millert 163:
164: <p>
1.86 millert 165: <li><a href="http://www.polyprep.org">Polytechnic Preparatory Country Day School</a><br>
1.84 millert 166: Poly Prep CDS, a large private school in the south of Brooklyn, NY,
167: has been using OpenBSD since its 2.9 release for its firewalls (on
168: both campuses) and now for its student fileservers. The student
169: fileservers, which are a part of the student computer club, run
170: OpenBSD 3.2 and are administered by students under the guidance of
1.86 millert 171: an experienced UNIX Administrator. The goal of the program is to
1.84 millert 172: teach potential computer professionals the responsibility needed
173: in running a UNIX-like system, good security practices and to show
1.86 millert 174: the students that there are alternatives to Linux.
1.83 millert 175: <p>
176:
1.79 jufi 177: </ul>
1.56 louis 178:
1.79 jufi 179: <h2><font color="#e00000"><a name="com">Commercial Users</a></font></h2>
1.44 deraadt 180:
1.79 jufi 181: <ul>
1.56 louis 182: <li><a href="http://www.adobe.com/">Adobe Systems</a><br>
183: This software giant uses OpenBSD on a number of their network firewalls
184: and network testing systems.<p>
1.23 jkatz 185:
1.43 deraadt 186: <li><a href="http://www.alteon.com">Alteon Networks</a><br>
187: The gigabit ethernet
1.22 jkatz 188: hardware manufacturer, uses OpenBSD machines in varying capacities ranging
1.33 deraadt 189: from testbeds to gateways.<p>
1.22 jkatz 190:
1.43 deraadt 191: <li><a href="http://www.core-sdi.com">CORE SDI S.A.</a><br>
192: An Information Security company based in Buenos Aires, Argentina uses OpenBSD
193: as the main platform for operation and development of information security related
1.12 ivan 194: products. "The robustness, portability and commitment to security
1.14 todd 195: of OpenBSD, as well as the ability to run on different hardware platforms,
196: provides an ideal operating system for environments where security and high
1.56 louis 197: availability are major concerns", says Ivan Arce, CORE SDI's CEO.<p>
1.43 deraadt 198:
1.56 louis 199: <li><a href="http://www.fscinternet.com">FSC Internet Corp.</a><br>
200: A large Information Security and Internet development firm located in
201: Toronto, has used OpenBSD and its IPsec support to construct
202: a secure and flexible VPN for a multi-billion dollar client. "We are
203: delighted with OpenBSD's performance, reliability, and pro-active
204: attitude towards security," says a company spokesperson. "We intend
205: to use OpenBSD in many future projects. We believe strongly that
206: open-source solutions like OpenBSD are best able to provide the high
207: levels of security our clients require -- closed-source software
208: almost never receives the level of code review that OpenBSD is
209: committed to."<p>
1.54 louis 210:
1.90 ian 211: <li><a href="http://www.learningtree.com/">Learning Tree International</a>,
1.91 ! ian 212: the leading vendor-independent training company, uses OpenBSD
1.90 ian 213: in some of their security and firewall courses.
214: <p>
215:
1.56 louis 216: <li><a href="http://www.netsec.net/">Network Security Technologies, Inc.</a><br>
217: This network and computer security firm uses OpenBSD for high speed
218: intrusion detection, virtual private networking, and data warehousing
219: applications. Network Security Technologies, Inc is located in the
220: Washington DC metro area, and uses OpenBSD at several undisclosed
221: military and government agency locations.<p>
1.43 deraadt 222:
1.56 louis 223: <li><a href="http://www.softquad.com/">SoftQuad Software Inc.</a><br>
224: This maker of HTML and XML editing software uses OpenBSD for their
225: gateway/firewall and FTP services.<p>
1.12 ivan 226:
1.78 millert 227: <li><a href="http://www.touchtunes.com/">TouchTunes</a><br>
228: TouchTunes is currently the only provider of digital downloading
229: jukeboxes to coin-operated machine operators across the U.S.
230: TouchTunes relies heavily on OpenBSD for high-traffic FTP servers,
231: secure firewalls and VPN connectivity. Internal DNS servers also run on
232: OpenBSD.<p>
1.79 jufi 233:
1.56 louis 234: <li><a href="http://www.xtime.com/">Xtime</a><br>
235: Xtime's core technology is the Time Inventory Management Engine, or
1.80 jufi 236: TIMEngine ®. This technology brings the benefits of e-commerce to
1.56 louis 237: service merchants everywhere, making their time-based inventory available
238: via the web or phone, and delivering powerful new customer relationship
239: management capabilities. Xtime leverages the power of OpenBSD for 75%
240: of their mission-critical network infrastructure, which includes Mail
241: servers, DNS servers, several VPN/Firewalls, secure logging hosts,
242: monitoring/IDS and production web servers. OpenBSD is the de-facto OS
243: used by the Xtime network operations department, boasting a 100% usage
244: rate amongst the department for desktop workstations.
245: <p>
1.29 deraadt 246:
1.79 jufi 247: </ul>
1.1 jkatz 248:
1.79 jufi 249: <h2><font color="#e00000"><a name="isp">Internet Service Providers</a></font></h2>
1.56 louis 250: <p>
251: One goal of any ISP is to keep their customers' sites and accounts safe
252: from intrusion. OpenBSD's security record speaks for itself, so many
253: ISPs use OpenBSD for this reason alone. However, others use OpenBSD for
254: many, if not most, of their services.
1.79 jufi 255: <ul>
1.18 deraadt 256:
1.71 ian 257: <li><a href="http://www.anonix.net/">Anonix</a><br>
1.70 ian 258: Anonix is an ISP offering anonymous email, shell, and web hosting
1.71 ian 259: services. All of these, plus DNS and billing, are run on OpenBSD.<br>
1.70 ian 260: <i>"We feel confident in its security, and like its clean, layered approach.
261: The basic install doesn't have huge amounts of unnecessary baggage; we can
262: be sure that everything on our systems belongs there."</i>
263: <p>
264:
1.56 louis 265: <li><a href="http://www.bsws.de/">BS Web Services</a><br>
266: BS Web Services, a german ISP, is using OpenBSD servers for primary and
267: secondary DNS (djbdns), primary Web hosting (Apache) and
268: primary mail services (qmail-ldap). They also run mission critical
1.68 jsyn 269: LDAP Authentication Backend on OpenBSD (OpenLDAP), as well as MySQL databases.
1.56 louis 270: Hostmaster Henning Brauer writes:<br>
271: <i>"OpenBSD needed some tuning on these machines, especially bigger maxprocs
1.58 louis 272: and maxfiles, but it handles extraordinary loads on ordinary hardware. We are
273: using AMD Athlons (mostly the new Thunderbirds) and AMD K6-III's. We also have
274: some internal machines running OpenBSD as testbeds and printservers and all
275: sorts of other purposes. We plan to move some more machines to OpenBSD,
276: especially our firewalls. Unfortunately we are still running some closed
277: source software, but we'd like to try the Linux emulation. OpenBSD's
278: behaviour under high load, especially under DoS attacks, just doesn't
279: compare to the Linux we used before - Linux went extremely slow, while
280: OpenBSD doesn't even care (same hardware!)"</i>.
1.56 louis 281: <p>
282:
283: <li><a href="http://www.calyx.net">Calyx Internet Access Corp.</a><br>
284: This company uses OpenBSD for running all mission-critical services
285: including WWW, FTP, email, VPN traffic, and network monitoring at its
286: data centers in New York, Los Angeles, and Amsterdam. Even larger web
287: sites such as
288: <a href="http://www.snapple.com">snapple.com</a>,
289: <a href="http://www.tanqueray.com">tanqueray.com</a> and others are no
290: challenge for OpenBSD.<p>
1.1 jkatz 291:
1.80 jufi 292: <li><a href="http://c2pro.net">C2PRO</a><br>
1.77 millert 293: C2PRO is an Indonesian internet service provider using OpenBSD for their
294: web, mail, shell and network monitoring servers.<p>
295:
1.80 jufi 296: <li><a href="http://www.crown.net">Crown.Net</a><br>
1.43 deraadt 297: This internet service provider is running almost completely on
1.24 deraadt 298: a mixture of OpenBSD/sparc and OpenBSD/i386. Our Web Servers(2), Mail
299: Server, Primary and Secondary DNS, and Radius servers all are running
300: OpenBSD/sparc and our shell server and several co-located servers are
1.33 deraadt 301: running OpenBSD/i386.<p>
1.24 deraadt 302:
1.56 louis 303: <li><a href="http://www.elixor.net/">Elixor Networks Inc.</a><br>
304: Elixor Networks uses OpenBSD on AMD hardware to provide shell accounts,
305: website hosting, and domain name hosting.
306: <p>
1.25 angelos 307:
1.56 louis 308: <li><a href="http://www.empirenet.net/">Empire Net</a><br>
309: An ISP in Bend, Oregon, uses OpenBSD on AMD, Intel, and Sun based hardware,
1.72 miod 310: for routing, firewalling, IPsec (VPN), <A
1.56 louis 311: HREF="http://www.csl.sony.co.jp/person/kjc/software.html#ALTQ">bandwidth
312: limiting</a>, web hosting, database servers, network monitoring, intrusion
313: detection, mail servers, backup servers, cache servers, and workstations.
314: One of their OpenBSD routers handles traffic on between a T3 and eight fast
315: ethernet ports, also with several 802.1Q VLANs to separate networks for
1.62 chris 316: co-location customers and business park tenants. An OpenBSD mail server
317: handles e-mail storage/retrieval and RADIUS authentication for over 5,000 users.
318: Several OpenBSD web servers each handle over 300 web sites.<P>
1.27 ian 319:
1.63 louis 320: <li><a href="http://www.globalwire.se/">Globalwire Communications</a><br>
321: Globalwire Communications is using OpenBSD on their Short Message
322: Service (SMS) gateway and database servers.
323: <p>
324:
1.43 deraadt 325: <li><a href="http://www.hobbiton.org/">Hobbiton.org</a><br>
1.73 ian 326: This ISP used OpenBSD to run their free shell server for many years
1.74 ian 327: (it was shut down in November, 2001 due to rising costs of running
1.73 ian 328: a "free" service). They also use OpenBSD on other systems.
329: The shell server, a single AMD Athlon 650, handled at the end
330: 101,796 users. "We tried OpenBSD after having constant security
331: problems with other operating systems", said Hobbiton's Leif
1.43 deraadt 332: Pedersen. "Since then, security in the operating system has not been a
333: problem and, as an added bonus, the systems have been more stable."
1.37 louis 334: <p>
1.34 deraadt 335:
1.56 louis 336: <li><a href="http://www.hurontario.net">Hurontario.net</a><br>
337: In the Headwaters region of Ontario, Canada, Hurontario.net uses OpenBSD
338: on several of their own and their customers' machines.
339: <p>
340:
341: <li><a href="http://www.ioactive.com/">IOActive</a><br>
342: IOActive provides WWW developers and hackers with a place to tinker on test
343: servers. The Seattle, WA, service provider also installs OpenBSD firewall,
344: VPN and IDS systems for regional businesses. "OpenBSD is fast, reliable, and I
345: sleep a little better at night knowing I'm using it," says owner Josh Pennell.
346: "The other thing I love about it is over half of the work is done to secure
347: the box right after installation, saving my company copious amounts of time.
348: OpenBSD in my mind is the defacto standard for open source secure operating
349: systems. Everyone else is just trying to catch up".<p>
350:
1.80 jufi 351: <li><a href="http://www.poppe.com">Poppe Tyson Europe</a>
1.56 louis 352: is using OpenBSD as a primary DNS, mailserver for
353: 100+ mailboxes, and as their Website Development server for over 50
354: sites.<p>
355:
356: <li><a href="http://www.qpalzm.com">qpalzm.com services</a><br>
357: qpalzm services runs OpenBSD to offer web hosting and shell accounts. The
358: website offers daily updates on programming, gaming, irc, and other
359: technobabble. An online MUD is also available. There is also a
360: <a href="http://www.jscript.org">JavaScript Mailing List</a>
361: using OpenBSD for the benefit of those interested in JavaScript
362: and DHTML. Incidently, qpalzm.com's busy WWW, FTP and mail server runs
363: just fine with OpenBSD on a 200MHz Pentium Pro.<p>
364:
365: <li><a href="http://www.rtmx.net">RTMX Networking Services</a><br>
366: This North Carolina ISP is using OpenBSD on multiple servers for Web,
367: DNS and over 1000 e-mail users in their community just West of
368: Research Triangle. There is a mix of AMD K-6, MicroSPARC-II and
369: PowerPC systems in use, with more customer sub-net servers coming
370: on-line. RTMX.NET mirrors the OpenBSD
371: <a href="http://openbsd.groupbsd.org">WWW</a>
372: and <a href="ftp://openbsd.groupbsd.org/pub/OpenBSD/">ftp</a> sites,
373: and also provides an anonymous CVS repository
374: (CVSROOT=anoncvs@openbsd.groupbsd.org:/cvs), all thanks to 47GB of
375: disk space and a dedicated T1 connection.<p>
376:
1.61 louis 377: <li><a href="http://start.swebase.com/?sida=maskiner">Swebase Network</a><br>
378: This ISP in Sweden uses OpenBSD for Web, DNS and mail servers.
379: <p>
380:
1.56 louis 381: <li><a href="http://www.wythenet.com">WytheNet, Inc.</a><br>
382: This Virginia ISP uses OpenBSD on all of its servers, including primary and
383: secondary radius, primary and secondary DNS, mail, network monitoring, and
384: several firewalls. They also sell OpenBSD based routers and firewalls to
385: their business DSL customers.
1.46 louis 386: <p>
387:
1.76 millert 388: <li><a href="http://www.vovoid.com">Vovoid Software & Multimedia.</a><br>
389: Vovoid Software & Multimedia in Gothenburg, Sweden runs OpenBSD for
390: Firewalls, Web Servers, Mail Servers and DNS Servers. "The choice
391: of OpenBSD for our production servers is obvious and an important
392: keystone in our security strategy."
393: <p>
394:
1.87 millert 395: <li><a href="http://www.phoenixcomm.net">Phoenix Communications</a><br>
396: Phoenix Communications is an ISP in Dallas, Texas, that uses OpenBSD
397: for firewalls and other infrastructure.
398: <p>
399:
1.79 jufi 400: </ul>
1.43 deraadt 401:
1.6 downsj 402: <hr>
1.21 pauls 403: <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
1.79 jufi 404: <a href="mailto:www@openbsd.org">www@openbsd.org</a>
1.91 ! ian 405: <br><small>$OpenBSD: users.html,v 1.90 2003/03/21 18:28:43 ian Exp $</small>
1.6 downsj 406:
407: </body>
1.1 jkatz 408: </html>
![[BACK]](/icons/back.gif){kind=icon}
Return to users.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www