This is a port of dnscrypt-wrapper, which adds dnscrypt support to any name
resolver. It is the server-side counterpart of dnscrypt-proxy, and is in
fact derived from its source.
PR: 200015
Submitted by: freebsd@toyingwithfate.com
Approved by: feld (mentor)
Differential Revision: https://reviews.freebsd.org/D3535
OpenConnect server (ocserv) is an SSL VPN server. Its purpose is
to be a secure, small, fast and configurable VPN server. It implements
the OpenConnect SSL VPN protocol, and has also (currently experimental)
compatibility with clients using the AnyConnect SSL VPN protocol.
The OpenConnect protocol provides a dual TCP/UDP VPN channel, and
uses the standard IETF security protocols to secure it. Both IPv4
and IPv6 are supported.
Ocserv's main features are security through provilege separation
and sandboxing, accounting, and resilience due to a combined use
of TCP and UDP. Authentication occurs in an isolated security
module process, and each user is assigned an unprivileged worker
process, and a networking (tun) device. That not only eases the
control of the resources of each user or group of users, but also
prevents data leak (e.g., heartbleed-style attacks), and privilege
escalation due to any bug on the VPN handling (worker) process. A
management interface allows for viewing and querying logged-in
users.
WWW: http://www.infradead.org/ocserv/
PR: 202253
Submitted by: Carlos Jacobo Puga Medina <cpm@fbsd.es>
Reviewed by: pi
Change the home directory of the quagga user to /var/empty which prevent QA
First the home does not need to be harcoded to /usr/local/etc/quagga, second
it fixes issues where the home created by the user addition is 755 then the
plist modifies it to 750
Reviewed by: mat
Approved by: mat (maintainer)
Sponsored by: gandi.net
Differential Revision: https://reviews.freebsd.org/D3135
Vault is a tool for securely accessing secrets. A secret is anything that you
want to tightly control access to, such as API keys, passwords, certificates,
and more. Vault provides a unified interface to any secret, while providing
tight access control and recording a detailed audit log.
WWW: https://vaultproject.io/
An open-source, distributed, time series database with no external dependencies.
WWW: http://influxdb.com
PR: 198073
Submitted by: Stefan Lambrev <cheffo@freebsd-bg.org>
Orthanc aims at providing a simple, yet powerful standalone DICOM
server. It is designed to improve the DICOM flows in hospitals and to
support research about the automated analysis of medical images.
Orthanc can turn any computer running Windows, Linux, FreeBSD or OS X
into a DICOM store (in other words, a mini-PACS system). Its
architecture is lightweight and standalone, meaning that no complex
database administration is required, nor the installation of third-party
dependencies.
What makes Orthanc unique is the fact that it provides a RESTful API.
Thanks to this major feature, it is possible to drive Orthanc from any
computer language. The DICOM tags of the stored medical images can be
downloaded in the JSON file format. Furthermore, standard PNG images can
be generated on-the-fly from the DICOM instances by Orthanc.
Orthanc lets its users focus on the content of the DICOM files, hiding
the complexity of the DICOM format and of the DICOM protocol.
WWW: http://www.orthanc-server.com/
PR: 199146
Submitted by: mp39590@gmail.com
to 3.0.5572.0.
The user and group names have change, but the uid/gid remain the same.
The port will continue to use the old database and user/group names if
they exist, but will default to the new names for new installs.
Instructions are in pkg-message for how to manually migrate things
yourself.
PR: 199093
Submitted by: maintainer (Ben Woods)
Riemann monitors low-latency, transient shared state for systems with many
moving parts.
Riemann aggregates events from your servers and applications with a powerful
stream processing language. Send an email for every exception raised by your
code. Track the latency distribution of your web app. See the top processes
on any host, by memory and CPU. Combine statistics from every Riak node in
your cluster and forward to Graphite. Send alerts when a key process fails
to check in. Know how many users signed up right this second.
WWW: http://riemann.io/
PR: 197403
Submitted by: Dave Cottlehuber <dch@skunkwerks.at>
Media Browser Server is a home media server built on top of other popular
open source technologies such as Service Stack, jQuery, jQuery mobile,
and Mono.
It features a REST-based api with built-in documention to facilitate
client development. We also have client libraries for our api to enable
rapid development.
WWW: http://mediabrowser.tv/
PR: 194634
Submitted by: Ben Woods
Server Density Agent for FreeBSD
Monitor CPU, memory, disk usage, network, Apache, MySQL + more via the
ServerDensity platform.
WWW: https://www.serverdensity.com/
PR: 191562
Submitted by: arcade (b1t.name)
Welcome to Rundeck, the human interface to your operations. Rundeck
features fine-grain access controls, a built-in job scheduler, and the
ability to define workflows that dispatch commands and scripts to your
nodes.
The open source Calendar and Contacts Server project is a standards-compliant
server implementing the CalDAV and CardDAV protocols (RFC 4791, RFC 6352).
It provides a shared location on the network allowing multiple users to store
and edit calendaring and contact information.
WWW: http://www.calendarserver.org
PR: 186201 (with changes)
Submitted by: Axel.Rau Chaos1 de
Kamailio is an open source SIP proxy server that is capable of
handling thousands of up calls in a second. Among the features
it provides, are support for TCP, UDP and SCTP, secure communication
via TLS for VoIP (voice, video), accounting, the most popular open
source databases and much more.
Originally starting out as the SIP Express Router (SER) project by
the Fraunhofer Society in 2001, the design team got together in
2008, merged old and new source code and rebranded SER to Kamailio.
WWW: http://www.kamailio.org/
PR: 181301
Submitted by: Oliver Mahmoudi <olivermahmoudi@gmail.com>
Reviewed by: marino
- Use nsd instead of bind user
This release has new features and bugfixes. In nsd.conf you can
configure database: "" this makes NSD not use the large mmapped nsd.db
file, but instead read and write the zonefiles in text format, which
saves about 50% of the memory usage. Also zonefile reading and
writing has been optimised to be faster, as well as processing time
for zone transfers. NSD writes the (changed) zonefiles every hour.
The new nsd-checkzone tool reports if a zonefile parses so you can check
it before reading it into the daemon.
A bug is fixed where NSD 4 causes rising load average and memory
consumption on Linux systems, which is caused by a bug in Linux that
slowly deteriorates system performance by repeated recursive forks.
Full release notes: http://open.nlnetlabs.nl/pipermail/nsd-users/2014-September/002007.html
PR: 193332
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
Sponsored by: DK Hostmaster A/S
- Separate dtv-scan-tables in his own port
- Add XMLTV option
- Create a new user/group for tvheadend
- Improve tvheadend startscript
- Convert manual patching to USES=shebangfix
Submitted by: Dreamcat4 <dreamcat4@gmail.com>
