Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 15 Nov 2004 22:14:31 -0800 (PST)
From:      "Matthew T. Lager" <freebsd@trinetworks.com>
To:        "Kris Kennaway" <kris@obsecurity.org>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: MPSAFE - Warning
Message-ID:  <1733.24.25.209.32.1100585671.squirrel@24.25.209.32>
In-Reply-To: <20041116031937.GA32097@xor.obsecurity.org>
References:  <200411160054.39582.giulianocm@uol.com.br> <20041116031937.GA32097@xor.obsecurity.org>

next in thread | previous in thread | raw e-mail | index | archive | help
I too receive this error. I require the use of KAME IPSEC. Basiclly,
services such as IPV6 and IPSEC require the kernel to be GIANT locked,
which is incompatable with MPSAFE. 5.3 forces MPSAFE to 0 if the system is
GIANT locked, hence the warning.

I backed down to 5.2.1 and ran IPSEC with no problems. I actually did
experience many issues with my IPSEC tunnel in 5.3. I beleive a GIANT FREE
IPV6/IPSEC implementation is a requirement for the 5.4 release, hopefully
we see it soon in the -STABLE tree, keep an eye on freebsd.org/releng as
it is listed as a project in the TODO list (at least for IPSEC)...

Matthew T. Lager

> On Tue, Nov 16, 2004 at 12:54:39AM -0200, Giuliano Cardozo Medalha wrote:
>> Hi,
>>
>> I got some messages for my customized kernel, using IPsec and IPv6:
>>
>> WARNING: MPSAFE network stack disabled, expect reduced performance.
>>
>> My kernel have the following option:
>>
>> options         NET_WITH_GIANT
>>
>> How is possible to correct this warning
>
> Wait for a later release, or disable IPv6 :-)
>
> IPv6 is not yet MP-safe.
>
> Kris
>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1733.24.25.209.32.1100585671.squirrel>