From owner-freebsd-arch@FreeBSD.ORG Fri Mar 17 02:32:44 2006 Return-Path: X-Original-To: arch@freebsd.org Delivered-To: freebsd-arch@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8FA2616A400; Fri, 17 Mar 2006 02:32:44 +0000 (UTC) (envelope-from gnn@neville-neil.com) Received: from mrout1.yahoo.com (mrout1.yahoo.com [216.145.54.171]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3A8D043D45; Fri, 17 Mar 2006 02:32:44 +0000 (GMT) (envelope-from gnn@neville-neil.com) Received: from minion.local.neville-neil.com (proxy8.corp.yahoo.com [216.145.48.13]) by mrout1.yahoo.com (8.13.4/8.13.4/y.out) with ESMTP id k2H2VpJt027086; Thu, 16 Mar 2006 18:31:52 -0800 (PST) Date: Fri, 17 Mar 2006 10:28:09 +0900 Message-ID: From: "George V. Neville-Neil" To: "Bjoern A. Zeeb" In-Reply-To: <20060316082738.W2181@maildrop.int.zabbadoz.net> References: <20060315004530.B5861@fledge.watson.org> <20060314.204252.74651890.imp@bsdimp.com> <20060315105031.E5861@fledge.watson.org> <20060315215915.GB16188@garage.freebsd.pl> <1142496340.4311.12.camel@massimo.datacode.it> <20060316082738.W2181@maildrop.int.zabbadoz.net> User-Agent: Wanderlust/2.14.0 (Africa) SEMI/1.14.6 (Maruoka) FLIM/1.14.8 (=?ISO-8859-4?Q?Shij=F2?=) APEL/10.6 Emacs/22.0.50 (i386-apple-darwin8.5.1) MULE/5.0 (SAKAKI) MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka") Content-Type: text/plain; charset=US-ASCII Cc: arch@freebsd.org, Massimo Lusetti , Robert Watson , Pawel Jakub Dawidek Subject: Re: KAME/Fast IPSEC (was Re: netatm: plan for removal unless an active maintainer is found) X-BeenThere: freebsd-arch@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussion related to FreeBSD architecture List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Mar 2006 02:32:44 -0000 At Thu, 16 Mar 2006 08:36:19 +0000 (UTC), Bjoern A. Zeeb wrote: > with hopefully enough time this problem will be solved during > the year. This will also need some netinet6 work,... > > What you can find at > http://sources.zabbadoz.net/freebsd/ipv6/ > is far from being complete or fully up-to-date but it's a start... > Sorry to chime in late, server upgrade. We (Bjoern, myself and a few others) are actively working on this. I am working first to make the system work in this way: 1) INET6: Kame IPv6, no IPSec 2) INET6 + IPSEC: Pure Kame IPv6 and IPSec 3) FAST_IPSEC: v4 Fast IPSec 4) INET6 + FAST_IPSEC: Kame v6 + FAST IPsec v4 and v6 That is we will be able to use Kame IPv6 with either Kame IPSec or FAST_IPSEC. The long term goal is to have only one set of code for IPv6 and for IPSec, but that is going to take a bit more work. I have started the changes to make 4 possible in a p4 branch. For those with access look at branches marked fast_ipsec. I want to do a lot of testing on this before putting it into CVS and even though there is the TAHI test framework testing takes a while and I want to try this with some more complex real networks. Help, of course, is always appreciated ;-) If anyone wants to be on my "little list of concerned parties" send me your email and I'll try to send out regular patches and mails. Later, George