Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 29 Nov 2009 18:00:56 +0000 (UTC)
From:      "Bjoern A. Zeeb" <bz@FreeBSD.org>
To:        src-committers@freebsd.org, svn-src-all@freebsd.org,  svn-src-head@freebsd.org
Subject:   Re: svn commit: r199899 - head/sys/netipsec
Message-ID:  <20091129175432.K37440@maildrop.int.zabbadoz.net>
In-Reply-To: <200911291053.nATArYrV086240@svn.freebsd.org>
References:  <200911291053.nATArYrV086240@svn.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 29 Nov 2009, Bjoern A. Zeeb wrote:

>  With this, after the opencrypto/deflate changes, IPcomp starts to work
>  apart from edge cases.  Leave it disabled by default until those are
>  fixed as well.

Note that after r199906 (apart from stats) IPcomp is working as good
as net/zlib.? is.  There are occational cases where we get a crypto
error.  An update to the latest zlib.? fixes this.  I do have a
patch but ideally we would want to just use an unchanged libz (we
have 2-3 copies in sys/), a version without the classic PPP changes.
For this to happen, ng_deflate will need to be "fixed"; it looks like
it could need some zlib improvements for stability anyway from reading
the code.  Anyone who uses it and can test ng_deflate is welcome to
contact me.

/bz

-- 
Bjoern A. Zeeb         It will not break if you know what you are doing.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20091129175432.K37440>