<![CDATA[New series: FreeBSD Foundationals]]>New series: FreeBSD Foundationals

Part 1 is about Jails - specifically VNET Jails. What epair interfaces actually are (virtual ethernet cables), how bridges tie them together, why the host is basically a router for your jails, and what devfs rulesets control.

Covers the full lifecycle from jail.conf through pf firewalling with NAT/RDR for IPv4 and direct routing for IPv6. Plus the gotchas that'll cost you hours if nobody warns you.

Not a beginner tutorial, hardcore details. The useful middle.

Link Preview Image
FreeBSD Foundationals: Jails - From Chroot on Steroids to Full Virtual Networks

The first in a series on FreeBSD fundamentals. This one covers Jails from the ground up: why they exist, how classic Jails differ from VNET Jails, what epair...

favicon

Larvitz Blog (blog.hofstede.it)

]]>https://board.circlewithadot.net/topic/5550bffc-d547-4633-91ff-767230eb2653/new-series-freebsd-foundationalsRSS for NodeFri, 15 May 2026 02:15:38 GMTMon, 02 Mar 2026 19:19:59 GMT60<![CDATA[Reply to New series: FreeBSD Foundationals on Sat, 18 Apr 2026 10:24:25 GMT]]>@mrcool Glad it worked 🙂

]]>https://board.circlewithadot.net/post/https://burningboard.net/users/Larvitz/statuses/116425219498405303https://board.circlewithadot.net/post/https://burningboard.net/users/Larvitz/statuses/116425219498405303Sat, 18 Apr 2026 10:24:25 GMT<![CDATA[Reply to New series: FreeBSD Foundationals on Sat, 18 Apr 2026 09:14:42 GMT]]>@Larvitz This just helped me set up my first vnet jail. Thank you.

]]>https://board.circlewithadot.net/post/https://social.tchncs.de/users/mrcool/statuses/116424945304504576https://board.circlewithadot.net/post/https://social.tchncs.de/users/mrcool/statuses/116424945304504576Sat, 18 Apr 2026 09:14:42 GMT<![CDATA[Reply to New series: FreeBSD Foundationals on Tue, 03 Mar 2026 00:24:33 GMT]]>@Larvitz

Great, thank you!

]]>https://board.circlewithadot.net/post/https://mastodon.social/ap/users/116049489905701701/statuses/116162394423696084https://board.circlewithadot.net/post/https://mastodon.social/ap/users/116049489905701701/statuses/116162394423696084Tue, 03 Mar 2026 00:24:33 GMT<![CDATA[Reply to New series: FreeBSD Foundationals on Mon, 02 Mar 2026 21:59:20 GMT]]>@Larvitz Sorry, what I meant is that you can give a VNET jail one of your hosts physical interface (e.g. igb0) which disappears from the host once the VNET jail is started. This also works with VLAN interfaces (e.g. em0.60) and so on (I did read the article). ^^

*Depending on the interface (or rather, it's driver), those physical interfaces can sometimes get "stuck" after the VNET jail is stopped, not getting released back to the host properly.

]]>https://board.circlewithadot.net/post/https://mastodon.bsd.cafe/users/subnetspider/statuses/116161823402257400https://board.circlewithadot.net/post/https://mastodon.bsd.cafe/users/subnetspider/statuses/116161823402257400Mon, 02 Mar 2026 21:59:20 GMT<![CDATA[Reply to New series: FreeBSD Foundationals on Mon, 02 Mar 2026 21:55:50 GMT]]>@subnetspider Yep, classic jails. I mentioned them briefly and in the comparisson table of the article 🙂

]]>https://board.circlewithadot.net/post/https://burningboard.net/users/Larvitz/statuses/116161809614411039https://board.circlewithadot.net/post/https://burningboard.net/users/Larvitz/statuses/116161809614411039Mon, 02 Mar 2026 21:55:50 GMT<![CDATA[Reply to New series: FreeBSD Foundationals on Mon, 02 Mar 2026 21:49:34 GMT]]>@Larvitz VNET Jails really are one of FreeBSD's greatest features. 😁

And while I do not have need for, you could also give a jail of of your FreeBSD hosts physical interfaces, skipping epair and bridge interfaces entirely. 😎

Netgraph VNET Jails are also pretty neat, though I find working with ng_* interfaces a bit too complicated, so I usually stick with epair.

]]>https://board.circlewithadot.net/post/https://mastodon.bsd.cafe/users/subnetspider/statuses/116161784976905531https://board.circlewithadot.net/post/https://mastodon.bsd.cafe/users/subnetspider/statuses/116161784976905531Mon, 02 Mar 2026 21:49:34 GMT