From owner-freebsd-net@FreeBSD.ORG Tue Jul 3 09:30:26 2007 Return-Path: X-Original-To: freebsd-net@freebsd.org Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id B251F16A468 for ; Tue, 3 Jul 2007 09:30:26 +0000 (UTC) (envelope-from rea-fbsd@codelabs.ru) Received: from pobox.codelabs.ru (pobox.codelabs.ru [144.206.177.45]) by mx1.freebsd.org (Postfix) with ESMTP id 6A2CF13C484 for ; Tue, 3 Jul 2007 09:30:26 +0000 (UTC) (envelope-from rea-fbsd@codelabs.ru) DomainKey-Signature: a=rsa-sha1; q=dns; c=simple; s=one; d=codelabs.ru; h=Received:Date:From:To:Cc:Message-ID:MIME-Version:Content-Type:Content-Disposition:Sender:X-Spam-Status:Subject; b=RQbEJ3foxPt2BXwzM/IHBJyE3WpiATExQR0F80RgCL6eZckL/PMIxnB1NNnSF9RqvrxNjVXlJEy+HLzOAiu1no3UTgb+6VGx3b20DyqUhbPRD0EY9X9yhVRyIKk801QB/Pks29plUPzuPlL4cPuSed/Pos1kuYn9owxdRNN5unk=; Received: from void.codelabs.ru (void.codelabs.ru [144.206.177.25]) by pobox.codelabs.ru with esmtpsa (TLSv1:AES256-SHA:256) id 1I5eiH-0004jG-47; Tue, 03 Jul 2007 13:30:25 +0400 Date: Tue, 3 Jul 2007 13:30:20 +0400 From: Eygene Ryabinkin To: gnn@freebsd.org Message-ID: <20070703093020.GA6161@void.codelabs.ru> MIME-Version: 1.0 Content-Type: text/plain; charset=koi8-r Content-Disposition: inline Sender: rea-fbsd@codelabs.ru X-Spam-Status: No, score=-2.0 required=4.0 tests=ALL_TRUSTED,AWL,BAYES_20 Cc: freebsd-net@freebsd.org Subject: FAST_IPSEC without INET6 X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Jul 2007 09:30:26 -0000 George, good day. I had tried to build my kernel on the -CURRENT after your FAST_IPSEC commits and I failed. The problem is that I am running without INET6, so inet6_tcp_input misses three functions on the kernel linking stage. I believe that the following patch will cure the situation: we don't need ip6_ipsec.c when we're running without inet6. ----- --- sys/conf/files.orig 2007-07-03 11:19:27.000000000 +0400 +++ sys/conf/files 2007-07-03 11:20:03.000000000 +0400 @@ -1880,7 +1880,7 @@ netinet6/ip6_input.c optional inet6 netinet6/ip6_mroute.c optional mrouting inet6 netinet6/ip6_output.c optional inet6 -netinet6/ip6_ipsec.c optional fast_ipsec +netinet6/ip6_ipsec.c optional fast_ipsec inet6 netinet6/mld6.c optional inet6 netinet6/nd6.c optional inet6 netinet6/nd6_nbr.c optional inet6 ----- It works for me: fixes kernel compilation and after the build IPSec stack is running fine. -- Eygene