Nexus features a good idea this early?

keyser

I’m really torn. I have noticed I have now abandoned trying/testing the new Nexus features (CoreDNS, Threatgate and snort3) because they were released in such a “buggy” state where even rudimentary setups would encounter bugs and silent errors. On top of that no logging would be available for many of the features provided.
The features were just too bug riddled and faulty to use at all, so I have removed them again as I lost faith in their capabilities.

This is probaly not what Netgate intended, but it’s going to take a pretty good “information campaign” after netgate believes it’s production ready, to get me to spend time looking into it again. It will remain “not production ready” in my mind until I’m convinced from outside information that’s no longer the case.

Effectively that causes the features to sit “stranded” because of their inital release state.

Are you guys in the same boat, because that’s not good for testing and bug-squashing…

Fx: This thread points out the massive problems with Threatgate: https://forum.netgate.com/topic/201066/bug-threatgate-list-management

There are similar threads with Snort3 not working, and CoreDNS behaving erratically and without logging

patient0

@keyser I'm in the same boat, I don't feel like testing (anymore) it since it's in such a rough state. I do like helping making a product better. But not if it's in such an early stage and not for a commercial product. Ok, granted maybe some feature(s) will make it into CE ... but who knows if?
Additionally I really dislike the all-in-one binary blob. Which is close-sourced or not-yet open-sourced; again who know?

On the other hand I do love the idea of the Zero Trust Engine and like to see it succeed.

TL;DR: Fully agree with you, I just didn't have the courage to write what you wrote.

keyser

@patient0 This is exactly where I’m at, and worry that the rest of the community is as well

patient0

@keyser said in Nexus features a good idea this early?:

@patient0 This is exactly where I’m at, and worry that the rest of the community is as well

If the number of bug reports - or the lack thereof - is anything to go by, many maybe see it the same way. Let's hope a few people will add their thoughts here.

Bob.Dig

I think the only way forward is to fix all the mentioned problems fast. And then do a detailed change log every time, not another blog post. Otherwise this might never get off the ground.

Mission-Ghost

I made a similar observation earlier and another forum member essentially told me to shut up—that no one was forcing me to use these features. How nice.

Thank you for making the same point again.