books.html

<!doctype html>
<html lang=en>
<meta charset=utf-8>

<title>OpenBSD: Books</title>
<meta name="description" content="Books about OpenBSD and UNIX">
<meta name="generator" content="The vi editor from UNIX">
<meta name="Author" content="Ian Darwin">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" type="text/css" href="openbsd.css">
<link rel="canonical" href="https://www.openbsd.org/books.html">

<h2 id=OpenBSD>
<a href="index.html">
<i>Open</i><b>BSD</b></a>
Books
</h2>

<hr>

<p>
Note that the information in some older books may no longer be accurate
or relevant to modern OpenBSD.

<hr>

<h3>OpenBSD-specific books</h3>

<dl>
<dt id="book14"><cite>Httpd and Relayd Mastery</cite>
<dd>by Michael W. Lucas
<dd>ISBN-10: 1-54675-206-4
<dd>ISBN-13: 978-1-54675-206-6
<dd>May 2017, 232 pp.
<dd>
<p>
<q>I think we're gonna need a bigger web server.</q>
<p>
OpenBSD has a solid reputation for security and stability.
It's well known for the OpenSMTPD mail server, the LibreSSL cryptography
library, and the PF packet filter. But nobody ever talks about the load
balancer, or the web server.
<p>
Until now.
<p>
The httpd web server provides a fast, stable, secure environment for your
web applications. The relayd load balancer lets you distribute Internet
application load across multiple hosts. Between the two, you can slash
hundreds of thousands of dollars off the cost of building, deploying,
and managing applications.

<dt id="book13"><cite>The Book of PF, 4th Edition</cite><br>
<i>A No-Nonsense Guide to the OpenBSD Firewall</i>
<dd>by Peter N. M. Hansteen
<dd>ISBN-13: 9781718504707
<dd>March 2026, 248 pp.
<dd>
<p>
The first sentence of this book is <q><i>This is a book about building the
network you need.</i></q> Taking it from there, Peter walks you through the whys
and the hows of building the high performance, low maintenance network you need,
using OpenBSD tools.
The book covers all bases, from the basic one machine configuration and basic
local area networks, all the way up to configurations with traffic shaping and
load balancing with "self-healing" networks and countermeasures against common
problems such as DoS attempts and spamming.  A basic understanding of TCP/IP
and some Unix knowledge is assumed.
The official book website for a sample chapter, table of contents and errata
can be found <a href="https://nostarch.com/book-of-pf-4e">here</a>.

<dt id="book9"><cite>SSH Mastery, 2nd Edition</cite><br>
<i>OpenSSH, PuTTY, Tunnels and Keys</i>
<dd>by Michael W. Lucas
<dd>ISBN-10: 1642350028
<dd>ISBN-13: 978-1642350029
<dd>February 2018, 242 pp.
<dd>
<p>
A guide to what you need to know about SSH. This book will help you
eliminate passwords on your network, tunnel unencrypted protocols
through secure channels, build VPNs with OpenSSH, and more. Focuses on
the OpenSSH server, the OpenSSH client, and the PuTTY client.
Michael W. Lucas is the author of <cite>Absolute OpenBSD</cite> and other BSD books.
The official SSH Mastery 2nd edition website is
<a href="https://www.michaelwlucas.com/tools/ssh">here</a>.

<dt id="book10"><cite>Absolute OpenBSD. 2nd Edition!</cite>
<dd>by Michael W. Lucas
<dd>ISBN-10: 1593274769
<dd>ISBN-13: 978-1-59327-476-4
<dd>April 2013, 536 pp.
<dd>
<p>
Michael W. Lucas brings us the long anticipated second edition of his
wildly successful book about using OpenBSD.  This book covers all aspects of
the OpenBSD system for new UNIX and BSD users alike.
The official Absolute OpenBSD 2nd edition website is
<a href="https://www.michaelwlucas.com/os/ao2e">here</a>.

<dt id="book3">
<cite>Secure Architectures with OpenBSD</cite>
<dd>by Brandon Palmer, Jose Nazario.
<dd>ISBN 03-21193-66-0
<dd>April 2004, 520 pp.
<dd>
<p>
A guide for system and network administrators who need to move to a
more secure operating system and a reference for seasoned OpenBSD users
who want to fully exploit every feature of the system. This book
covers all aspects of OpenBSD, including systrace, Kerberos V, IPv6 and
IPsec, and the development environment.

</dl>

<hr>

<h3>BSD-specific books</h3>
<dl>
<dt>
<cite>The Design and Implementation of the 4.4BSD Operating System</cite>
<dd>by Marshal Kirk McKusick, Keith Bostic, Michael J. Karels, John S. Quarterman
<dd>ISBN-10: 0132317923
<dd>ISBN-13: 978-0132317924
<dd>
<p>
At 549 pages plus an index, this book must be considered comprehensive.
McKusick, Bostic and Karels are well known as prime movers at
Berkeley CSRG (Computer Systems Research Group) during the 4.3/4.4BSD
period. This book covers the 4.4 and 4.4-Lite releases, and discusses
everything you wanted to know about how the system operates.  Not
100% applicable, but probably the closest there is to an overall
system internals manual for OpenBSD.

<dt>
<cite>Source Code Secrets: The Basic 386BSD Operating System Reference</cite>
(Volume 1 of <cite>Operating System Source Code Secrets</cite>)
<dd>by L. W. Jolitz, William Jolitz; 1997
<dd>
<p>
The Jolitzes built the first port of BSD to the PC-386 architecture,
and deserve a lot of credit for making BSD portable to this low-cost
architecture. The earliest versions, called "386bsd", were described
in articles in <em>Dr. Dobbs Journal</em>. This book goes beyond the articles,
and provides a comprehensive annotated collection of source code.
Not all of it applies to modern versions of OpenBSD, of course, but
you can still learn a lot from it.

<dt>
<cite>Berkeley Unix: A Simple and Comprehensive Guide</cite>
<dd>by James Wilson
<dd>
<p>
Begins with the basic commands and finishes with advanced programming
techniques. Offers strong coverage of system calls.

<dt>
<cite>An Introduction to Berkeley Unix and ANSI C</cite>
<dd>by Jack Hodges
<dd>
<p>
An introduction to the operating system and the programming language.  Intended
for self-study, requires no previous knowledge of Unix.  Covers the fundamentals
of programming; the correct use of syntax; programming style, debugging, logic,
and system programming with C.

<dt>
<dt>
<cite>4.4BSD User's Reference Manual (URM)</cite>
<dd>published by O'Reilly, 1994
<dd>
<p>
This is just a reprint of the man pages for users.
Your OpenBSD distribution includes the online man pages,
which are specific to OpenBSD, and more up to date. So
you don't need this one: use the <em>man</em> command instead.

<dt>
<dt>
<cite>4.4BSD System Manager's Manual (SMM)</cite>
<dd>published by O'Reilly, 1994
<dd>
<p>
This book details what you need to know to run a BSD system.
Quite a bit of this material is relevant to OpenBSD.
Unfortunately it is currently out of print.
Worse, due to licensing restrictions from AT&amp;T,
the electronic editions of these were not included in the
4.4BSD distributions.
They are not included with OpenBSD.

<dt>
<dt>
<cite>BSD mit Methode</cite>
<dd>published by C&amp;L Computer- und Literaturverlag GmbH, 1998
<dd>
<p>
A book in German on all
three freenix BSDs covering the essentials of installation, X configuration
and system administration, as well as PERL programming and tips on
LaTeX/Lyx. The book also covers the KDE desktop environment.
<br>Includes older versions of OpenBSD on the two included CD-ROMs.
<br><a href="https://www.lehmanns.de/shop/mathematik-informatik/115867-9783932311314-bsd-mit-methode">Lehmanns Online Bookshop</a>.
However, you might want to pick up a more recent version of the CD-ROM.

<dt>
<dt>
<cite>The OpenBSD PF Packet Filter Book</cite>
<dd>
published by Reed Media Services
<dd>
August 2006, 193 pp.
<dd>
<p>
This book is an expanded, cross-referenced, indexed, edited, and reformatted
version of the <a href="faq/pf/index.html">PF User's Guide</a>.
It also covers spamd and introduces the setup and differences of PF
on NetBSD, DragonFly, and FreeBSD.<br>
The official book website with table of contents, index, and
configuration examples can be found at
<a href="http://www.reedmedia.net/books/pf-book/">http://www.reedmedia.net/books/pf-book/</a>.

</dl>

<hr>

<h3>Unix user guides</h3>

<dl>

<dt><cite>Unix Made Easy</cite>
<dd>by John Muster
<dd><p>A general Unix book that covers all areas of the system.

<dt><cite>UNIX Power Tools</cite>
<dd>by Jerry D. Peek, Tim O'Reilly, and Mike Loukides
<dd>
<p>
This book is now in its third edition. It discusses
hundreds of neat tricks, little-known techniques, and add-on utilities.
Be aware that many of the utilities are either included with OpenBSD
or, more commonly, are already available as ports or packages.
So most of section 52.03, complaining about how hard it is to port
software to different UNIXes, can be disregarded if you learn about the
<a href="faq/ports/index.html">Ports System</a>
that is part of OpenBSD.

<dt><cite><a href="https://rodsbooks.com/multiboot/">The Multi-Boot Configuration Handbook</a></cite>
<dd>by Rod Smith
<dd>
<dd>
Book explaining techniques for Multi-booting.

</dl>

<hr>

<h3>Unix administration</h3>
<dl>
<dt><cite>UNIX System Administration Handbook</cite>
<dd>by Evi Nemeth, Garth Snyder, Scott Seebass, Trent R. Hein
<dd>
<p>
This is an excellent book on Unix system administration.

<dt id="book11"><cite>Sudo Mastery</cite>
<dd>by Michael W. Lucas
<dd>ISBN-13: 978-1493626205
<dd>ISBN-10: 1493626205
<dd>October 2013, 144pp.
<dd><p>Access Control for Real People
<p>
Unix-like operating systems use a rudimentary access control system:
the root account can do anything, while other users are peasants with
only minimal access. This worked fine in UNIX's youth, but today,
system administration responsibilities are spread among many people
and applications.  Different people may need different slices of
root's power. However pros and cons are considered as well.
This book also thoroughly covers sudo's extended features.
The official Sudo Mastery website is
<a href="https://www.michaelwlucas.com/nonfiction/sudo-mastery">here</a>.

<dt><cite>Essential System Administration</cite>
<dd>by &AElig;leen Frisch
<dd>
<p>
This book covers many fundamental tasks in system administration.  It includes
examples for a wide range of Unix operating systems, including BSD.

</dl>

<hr>

<h3>Unix programming</h3>
<dl>
<dt><cite>Unix Systems for Modern Architectures</cite>
<dd>by Curt Schimmel
<dd>
<p>
This book leads its reader through all the low-level kernel models for
multi-processing architectures.

<dt><cite>Lions' Commentary on UNIX 6th Edition with Source Code</cite>
<dd>by John Lions
<dd>ISBN 1-57398-013-7
<dd>
<p>
Although the UNIX described in this book is to BSD as a Model T Ford
is to a 70's Mustang or Thunderbird, UNIX inventor Ken Thompson
claims that <q>After 20 years, this is still the best exposition
of the workings of a 'real' operating system.</q> Originally circulated
in illicit photocopies, this is the book that most first- and second-generation
UNIX hackers cut their code-teeth on. Recommended as a good introduction
to how a timesharing OS works, if you've not been inside one before.
Substantially shorter than the McKusick book above.

<dt><cite>The Practice of Programming</cite>
<dd>by Brian W. Kernighan and Rob Pike
<dd>ISBN 0-201-61586-X
<dd>
<p>
Brian Kernighan had a hand in two other books which we recommend even though they're not UNIX specific, but are useful to programmers on UNIX and elsewhere.
This book covers practical programming considerations for C, C++ and Java.
Highly recommended.

<dt><cite>The Elements of Programming Style</cite>
<dd>by Brian W. Kernighan and P. J. Plauger
<dd>ISBN 0-07-034207-5
<dd>
<p>
This book is similar to <cite>The Practice of Programming</cite>, but older.  The
examples are given in Fortran and PL/I.

<dt><cite>Advanced Programming in the Unix Environment (3rd Edition)</cite>
<dd>by W. Richard Stevens, Stephen A. Rago
<dd>
<p>
This is a very detailed and easy to read book.  It has several examples
that you can learn from.  There is plenty of information about library and
system calls, and associated information so that you can use them.
This book along with the OpenBSD manual pages
make an excellent combination.

<dt><cite>The C Programming Language</cite>
<dd>by Brian W. Kernighan and Dennis M. Ritchie
<dd>ISBN 0-13-110362-8
<dd>
<p>
This is a clear and concise guide to the C programming language,
perhaps the only one you will ever need.  It focuses strictly on the C language,
not how to use your compiler or anything else.

<dt><cite>C: A Reference Manual</cite>
<dd>by Samuel P. Harbison and Guy L. Steele
<dd>
<p>
If you only had two books on C, then along with <cite>The C Programming Language</cite>, this would be your second one!
This book is not a tutorial (hence the title), it deals with syntax, data types,
ISO C library functions, and C/C++ compatibility.

<dt><cite>The Art of Software Security Assessment</cite>
<dd>by Mark Dowd, John McDonald and Justin Schuh
<dd>
<p>
Covers code auditing, design and operational review, types of
vulnerabilities, privilege models, signals,
interprocess communication, synchronization, networking and more.
Lots of examples and real world code snippets.

</dl>

<hr>

<h3>Network administration</h3>
<dl>
<dt id="book6"><cite>Das SSH-Buch</cite>
(German)
<dd>by Timo Dotzauer and Tobias L&uuml;tticke
<dd>ISBN 3-938626-03-8
<dd>Millin Verlag, December 2006, 600p.
<dd>
<p>This book covers the theory behind OpenSSH (protocol, channels, standards
documents) as well as using OpenSSH as an end user.
Although using Linux as a reference OS, many of the examples also have
a description how to get things done under BSD.
In a separate cookbook chapter, several scenarios from daily work are solved
using OpenSSH.
Furthermore, this book is the first German book to cover VPN via OpenSSH.

<dt id="book12"><cite>DNSSEC Mastery</cite>
<dd>by Michael W. Lucas
<dd>ISBN-13: 978-1484924471
<dd>ISBN-10: 1484924479
<dd>May 2013, 130 pp.
<dd>Securing the Domain Name System with BIND
<p>
DNS is one of the oldest protocols on the Internet, and was designed
for a network without hostile users. Anyone who wants to break into a
network starts by investigating the target's Domain Name Service.
<p>
In addition to providing a manual for BIND, this book thoroughly targets
the extensions which are available in the port net/isc-bind. DNS Security
Extensions, or DNSSEC, harden DNS.  But learning DNSSEC requires
wading through years of obsolete tutorials, dead ends, and
inscrutable standards.  Strengths and weaknesses of DNSSEC are
discussed.
<p>
The official DNSSEC Mastery website is
<a href="https://www.michaelwlucas.com/nonfiction/dnssec-mastery">
here</a>.

<dt><cite>SSH, The Secure Shell.</cite>
<dd>by Daniel J. Barrett and Richard Silverman
<dd>
<p>
The Definitive Guide.  OpenSSH is covered in detail.

<dt><cite>TCP/IP Illustrated, Volume 1</cite>
<dd>by W. Richard Stevens
<dd>
<p>
"Network administration" is really an inappropriate heading for this book.  It
is an encyclopedia of the TCP/IP protocol suite.  This book provides information,
and diagrams useful to understand the suite to its lowest level.
Home enthusiasts, developers, and network administrators alike will enjoy this
book.

<dt><cite>Kerberos: A Network Authentication System</cite>
<dd>by Brian Tung
<dd>
<p>
A guide for administrators of Kerberos-based networks.  Explains concepts of
the Kerberos system, as well as the installation and administration of it.

<dt><cite>IPsec: The New Security Standard for the Internet, Intranets and Virtual
Private Networks</cite>
<dd>by Naganand Doraswamy and Dan Harkins
<dd>
<p>
This book explains the IPsec protocol suite.  It also describes its relation
to the current deployments, such as VPNs, and future ideas.

<dt><cite>Computer Networks</cite>
<dd>by Andy Tanenbaum
<dd>
<p>
This book is a high-level guide to modern computer networking.  It presents
a wide range of protocols, concepts, and technologies.  It covers technologies
from fiber to wireless, LANs, Mobile IP, and a lot more.

<dt><cite>DNS and BIND</cite>
<dd>by Paul Albitz and Cricket Liu
<dd>
<p>
This book is an excellent introduction to DNS and BIND, useful for
anyone who has to implement DNS under OpenBSD.

<dt><cite>DHCP</cite>
<dd>by Ted Lemon and Ralph E. Droms
<dd>
<p>
Recommended by the <a href="https://www.isc.org/">Internet Software Consortium</a>,
which is the organization that produces the DHCP client/server software
included with OpenBSD.

<dt><cite>Managing NFS and NIS</cite>
<dd>by Hal Stern
<dd>
<p>
Gives essential information with examples on managing NFS and NIS.

<dt><cite>802.11 Security</cite>
<dd>by Bruce Potter and Bob Fleck
<dd>
<p>
Provides information on the fundamentals of wireless security, including
practical solutions for setting up clients, access points and gateways
under several operating systems. Two chapters are dedicated to OpenBSD 3.1,
covering wi, bridge, pf and altq.

</dl>

<hr>

<h3>Cryptography</h3>

<dl>

<dt><cite>Applied Cryptography: Protocols, Algorithms, and Source Code in C</cite>
<dd>by Bruce Schneier
<dd>
<p>
A comprehensive explanation of Cryptography, with information
about its history, protocols, and algorithms.  This book is a great
introduction to cryptography, with the necessary basics
to understand the field.  Also, it has a very extensive reference section.

<dt><cite>Handbook of Applied Cryptography</cite>
<dd>by Alfred J. Menezes, Paul C. van Oorschot and Scott A. Vanstone
<dd>
<p>
A new and detailed look at Cryptography.  The authors write:
<blockquote>
<q>...  Public-key cryptographic techniques
are now in widespread use, especially in the financial services
industry, in the public sector, and by individuals for their personal
privacy, such as in electronic mail. This Handbook will serve as a
valuable reference for the novice as well as for the expert who
needs a wider scope of coverage within the area of cryptography.
It is a necessary and timely guide for professionals who practice
the art of cryptography.</q>
</blockquote>
<p>
The entire book is
<a href="https://cacr.uwaterloo.ca/hac/">
available for free downloading</a> (for personal use only)
from the book authors' site, in PDF or PostScript.

<dt><cite>SSL and TLS Essentials: Securing the Web</cite>
<dd>by Stephen A. Thomas
<dd>
<p>
This book offers introductory coverage of the SSL and TLS protocols, with
examples.  The SSL protocol
is currently the basis of secure data transfer and secure transactions
on the Internet.  Aside from encryption, this book also covers data
integrity and details the SSL protocol.

<dt><cite>SSL and TLS: Designing and Building Secure Systems</cite>
<dd>by Eric Rescorla
<dd>
<p>
This book offers comprehensive information about the SSL and TLS protocols,
covering their operation and security,
together with usage and implementation details.
There are also chapters about HTTP over SSL, and SMTP over TLS (STARTTLS).
Eric Rescorla is the author of <code>ssldump</code>, a utility that can be
used to monitor SSL connections.
He has written several commercial and free SSL implementations.

<dt><cite>Big Book of IPsec RFCs: Internet Security Architecture</cite>
<dd>compiled by Pete Loshin
<dd>
<p>
A complete reprint of the IPsec RFCs with an extensive index and
glossary.

</dl>