Date: Thu, 17 Aug 2017 12:50:21 +0200 From: Marek Zarychta <zarychtam@plan-b.pwste.edu.pl> To: freebsd-net@freebsd.org Subject: Re: How likely is it that we can get a kernel tweak for 11.1 so the tcpmd5.ko module works? Message-ID: <20170817105021.GA17388@plan-b.pwste.edu.pl> In-Reply-To: <alpine.BSF.2.20.1708170346270.71105@bikeshed.isc.org> References: <alpine.BSF.2.20.1708170346270.71105@bikeshed.isc.org>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] On Thu, Aug 17, 2017 at 03:51:25AM +0000, Dan Mahoney wrote: > All, > > Please see https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=220170 > > Basically, there's a kernel module that's only usable if you've built a > custom kernel with IPSEC_SUPPORT. Since to build a custom kernel you've > going to rebuild this module anyway, I'm not sure why it was shipped in > -base. > > ISC runs a lot of BGP routing daemons and many of the people we peer with > require password auth as part of their peering policy. We were really > hoping for our new platform to not need to invent extra mechanics to > build/deploy custom kernels. > > How hard would it be to add: > > 1) IPSEC_SUPPORT to base without waiting for 11.2? (After all, IPSEC > itself is already in the base kernel). > > or > > 2) Building another module that would add the necessary IPSEC_SUPPORT > knobs so TCPMD5 loads without needing to modify the shipped kernel? > +1 It would be even better to exchange IPSEC with IPSEC_SUPPORT in GENERIC. Both modules: IPSEC as well as TCPMD5 could be loaded at boot time or later. Best regards, -- Marek Zarychta [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- iQEzBAABCAAdFiEEMOqvKm6wKvS1/ZeCdZ/s//1SjSwFAlmVdOkACgkQdZ/s//1S jSwqOwgAoGDbgtsvMah1DzeGrkvuEYNkxKBEF0+XTaThqqCk1+k9zpQkDojgnS8x Cu1WvmaYfPZhqOQhcMv3dQ2rjyv3uS4X51YnDdfoYbnsZCFdgpek5zGCSn3S8fKM 20aAUO/iCkqc4//8W1Ryf0rR544vz5T2DJyo9tkQpLkO1ltXnV7JJbEzmq5FCeFq ivpc6f50arJ5o42DiSxlvViIX8kSqhlotB+cHpPkIdX3P9JXrBB/tHKuaUF6k6Sl T9OfDHHoWb94yBW1OfDiT6vKRVTHXZ+tzrEOXtdmuc281tEt277gQWxa+xEFu1Hl 3T68SunASN0a1zp4zu/zsHqn6L6DoA== =S9pF -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20170817105021.GA17388>