Date: Sun, 14 Mar 2021 23:07:23 +0000 From: tech-lists <tech-lists@zyxst.net> To: freebsd-current@freebsd.org Subject: Re: Getting started with ktls Message-ID: <YE6XK6Jz7W7MrtKS@ceres.zyxst.net> In-Reply-To: <YQXPR0101MB0968DA8912890879ECB7C35BDD6D9@YQXPR0101MB0968.CANPRD01.PROD.OUTLOOK.COM> References: <CAOtMX2ggNtsEQz7TinyHciqsgzUSjcdvMDb1oORKHtMBnzTELw@mail.gmail.com> <20210311003136.GM56617@kduck.mit.edu> <CAOtMX2iKtBAQWRzY1K9twAFrtdH=S559J6Zd%2Bm5D-YHHPVYf7g@mail.gmail.com> <20210311031501.GP56617@kduck.mit.edu> <CAOtMX2hApCJuTe8OqEJmjrj9vffLB%2BM%2Bc5qR=iPrhRnbeZf=jQ@mail.gmail.com> <YQXPR0101MB096899D3D2241D0D6D830227DD909@YQXPR0101MB0968.CANPRD01.PROD.OUTLOOK.COM> <YE4kM3euujJw9saZ@ceres.zyxst.net> <CAOtMX2gNMw2%2BYcKT9cY35SqASmnvMMH9GDK66VjQvhA85Rj_kQ@mail.gmail.com> <YQXPR0101MB0968DA8912890879ECB7C35BDD6D9@YQXPR0101MB0968.CANPRD01.PROD.OUTLOOK.COM>
next in thread | previous in thread | raw e-mail | index | archive | help
--Pk6y6TuZd9lE1HDi Content-Type: text/plain; charset=us-ascii; format=flowed Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sun, Mar 14, 2021 at 08:55:18PM +0000, Rick Macklem wrote: >Alan explains how to set it up, below. >However, I thought I'd note that maybe one person has tested KTLS >on arm64, so you should consider doing this for test purposes only. >If you do do some testing, please post with your results, >success or failure. will do. The end-point I want is to have the arm64 machine accessible externally for wireguard-based vpn.=20 >Doing it this way means that everything linked to OpenSSL will use >it. Probably a better testsituation, but expect at least the apache >server to break. (Most breakage was fixed by a recent patch to the >serf library, but I think the apache server is still broken. I have latest serf installed with nginx. The machine, a rpi4/8GB, builds its ports with poudriere. I have WITH_OPENSSL_KTLS=3D set in /etc/src.conf and it's building a new world now. >If you want to try NFS-over-TLS, see this: >https://people.freebsd.org/~rmacklem/nfs-over-tls-setup.txt >Please let us know if you try it, rick yep, I'll try that too and post results here. thanks :D --=20 J. --Pk6y6TuZd9lE1HDi Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEE8n3tWhxW11Ccvv9/s8o7QhFzNAUFAmBOlyIACgkQs8o7QhFz NAVZlw//dOMU+9Gu/N9aK7EeF9JZfHeMEKfygCmQdSsE4+YXNyzyNhIusX/E2Qig oja4H12ZhXotP76FTxl2avtYX58A3m0/VDLzVKu5WPGst58AdGfUPMU0shkuAK9+ XBeR3RgU+W5ySURiwlfv73QDEDRcSsHK1yzn97MGnhebq06+PTwAf5+LYdp+fzVQ WN39rCvOQjzAAPrvWqcroCQuPapjhbP6JY27dlIRr1jrafqY8oNlcuERfSJcahhg B0dTe1hQVs9pGWWg3loGhjLMNXT6GyWmwA8m7cO43Pa1XPCsBJ7MmfUIxR8VMqIG YQQdc6sLcURYtoYnKUaUn3CBeWsrAf9H7kpRUni/DWG+8Y8n6E5H9MMjSijIUnxx VDlj6G17DLa+nuZ0Fp9wZdqh1Xcq3wm6vJh8Nd62fnTBLfWWRIUUhxKIuQeczsvG VuniDNz48A8TxWejcKhxV3ebuEieGnwUDIWXDeuPqn//Ky2kz8sJqjsvLM+rhd4i IxXubZdOhWJ8/8iCynb8iaZ3NvN3YcUEtynfC93QM/KC+G7Sn9rYK7UiGd1EIAiO hvGa5nsF7dy6Nv6noXA1SkcQqzeAhwYFCAHrk8g+4WslUyvoSJH6T/Vmo3lA+hYR 4j6SDljjbI2QRzUBF2m44nHexY6m4rGLL89b+rQHH8A/kSP2XZk= =Mjjw -----END PGP SIGNATURE----- --Pk6y6TuZd9lE1HDi--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?YE6XK6Jz7W7MrtKS>