From owner-freebsd-net@FreeBSD.ORG Tue Jul 3 15:05:29 2007 Return-Path: X-Original-To: net@freebsd.org Delivered-To: freebsd-net@FreeBSD.ORG Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 875A116A41F; Tue, 3 Jul 2007 15:05:29 +0000 (UTC) (envelope-from rrs@cisco.com) Received: from sj-iport-1.cisco.com (sj-iport-1-in.cisco.com [171.71.176.70]) by mx1.freebsd.org (Postfix) with ESMTP id 5A83713C44B; Tue, 3 Jul 2007 15:05:29 +0000 (UTC) (envelope-from rrs@cisco.com) Received: from sj-dkim-4.cisco.com ([171.71.179.196]) by sj-iport-1.cisco.com with ESMTP; 03 Jul 2007 08:05:29 -0700 X-IronPort-AV: i="4.16,492,1175497200"; d="scan'208"; a="6352307:sNHT21297228" Received: from sj-core-5.cisco.com (sj-core-5.cisco.com [171.71.177.238]) by sj-dkim-4.cisco.com (8.12.11/8.12.11) with ESMTP id l63F5SSa024959; Tue, 3 Jul 2007 08:05:28 -0700 Received: from xbh-sjc-211.amer.cisco.com (xbh-sjc-211.cisco.com [171.70.151.144]) by sj-core-5.cisco.com (8.12.10/8.12.6) with ESMTP id l63F5Ska004906; Tue, 3 Jul 2007 15:05:28 GMT Received: from xfe-sjc-211.amer.cisco.com ([171.70.151.174]) by xbh-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 3 Jul 2007 08:05:28 -0700 Received: from [127.0.0.1] ([171.68.225.134]) by xfe-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 3 Jul 2007 08:05:28 -0700 Message-ID: <468A661B.6050106@cisco.com> Date: Tue, 03 Jul 2007 11:07:07 -0400 From: Randall Stewart User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7.13) Gecko/20070601 X-Accept-Language: en-us, en MIME-Version: 1.0 To: gnn@freebsd.org References: In-Reply-To: Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-OriginalArrivalTime: 03 Jul 2007 15:05:28.0283 (UTC) FILETIME=[97765AB0:01C7BD83] DKIM-Signature: v=0.5; a=rsa-sha256; q=dns/txt; l=1659; t=1183475128; x=1184339128; c=relaxed/simple; s=sjdkim4002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=rrs@cisco.com; z=From:=20Randall=20Stewart=20 |Subject:=20Re=3A=20FAST_IPSEC=20is=20now=20IPSEC, =20please=20be=20advise d... |Sender:=20; bh=/zvbmSxuKsLYeDeAbW5qAzb5DkLHjHWbBLiNmQJWUTI=; b=BaOHzpWfYp2z0e95d2beBxdc4NVqKEs/GYTYObGvlygtm/a8J5cbREL/01kfWZ1jvyo1ivFi G5wTd4ZYumDXfxvxIlSuWWVj2SF2Ntn/fQcnAS4WY493oxC5++DaB3iO; Authentication-Results: sj-dkim-4; header.From=rrs@cisco.com; dkim=pass (sig from cisco.com/sjdkim4002 verified; ); Cc: current@freebsd.org, net@freebsd.org Subject: Re: FAST_IPSEC is now IPSEC, please be advised... X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Jul 2007 15:05:29 -0000 Great work George.. :-D R gnn@freebsd.org wrote: > Hi, > > My most recent check-in moves FreeBSD HEAD, soon to be 7.0 into the > post Kame era. What was once FAST_IPSEC has been made into IPSEC and > the Kame IPsec code has been removed from the tree. We will continue > to use and update the Kame IPv6 code but of course there will be no > more drops of code from the Kame project as it ended a year ago. > > Some things about the new IPsec: > > 1) Hardware Offload Support > > Support for several vendors hardware accelerators is available by > using the new IPsec code. > > 2) Fine Grained Locking (SMP) > > One of the major reasons to move to the new codebase and to deprecate > the Kame code was that we needed an IPsec stack that was locked for > our SMP kernel architecture. > > 3) Full IPv6 Support > > One of the missing features of the old FAST_IPSEC code was IPv6 > support. IPv6 is now fully supported. > > > The code has been tested in my lab using both home grown tests and the > TAHI test suite (http://www.tahi.org) as well by some FreeBSD > Developers, notably Bjoern Zeeb, who is also responsible for the user > land fixes, as well as numerous patches to the kernel. > > Please forward problems, and patches to me, or this list. > > Best, > George > > _______________________________________________ > freebsd-current@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-current > To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org" > -- Randall Stewart NSSTG - Cisco Systems Inc. 803-345-0369 803-317-4952 (cell)