From owner-freebsd-questions@FreeBSD.ORG  Wed Nov 17 10:31:19 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 08FA416A4CE
	for <freebsd-questions@freebsd.org>;
	Wed, 17 Nov 2004 10:31:19 +0000 (GMT)
Received: from fledge.watson.org (fledge.watson.org [204.156.12.50])
	by mx1.FreeBSD.org (Postfix) with ESMTP id A96D543D48
	for <freebsd-questions@freebsd.org>;
	Wed, 17 Nov 2004 10:31:18 +0000 (GMT)
	(envelope-from robert@fledge.watson.org)
Received: from fledge.watson.org (localhost [127.0.0.1])
	by fledge.watson.org (8.13.1/8.13.1) with ESMTP id iAHATotO070947;
	Wed, 17 Nov 2004 05:29:50 -0500 (EST)
	(envelope-from robert@fledge.watson.org)
Received: from localhost (robert@localhost)iAHATnOu070944;
	Wed, 17 Nov 2004 10:29:50 GMT
	(envelope-from robert@fledge.watson.org)
Date: Wed, 17 Nov 2004 10:29:49 +0000 (GMT)
From: Robert Watson <rwatson@freebsd.org>
X-Sender: robert@fledge.watson.org
To: Giuliano Cardozo Medalha <giulianocm@uol.com.br>
In-Reply-To: <200411160054.39582.giulianocm@uol.com.br>
Message-ID: <Pine.NEB.3.96L.1041117102752.59721C-100000@fledge.watson.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
cc: freebsd-questions@freebsd.org
Subject: Re: MPSAFE - Warning
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Nov 2004 10:31:19 -0000


On Tue, 16 Nov 2004, Giuliano Cardozo Medalha wrote:

> I got some messages for my customized kernel, using IPsec and IPv6: 
> 
> WARNING: MPSAFE network stack disabled, expect reduced performance. 
> 
> My kernel have the following option: 
> 
> options NET_WITH_GIANT
> 
> How is possible to correct this warning

The problem here is the KAME IPSEC code, which is not yet able to run
without the Giant lock.  For those using only IPv4, FAST_IPSEC is an
option, as it can run without the Giant lock.  Unfortunately, until the
KAME IPSEC code is locked down, your system will need to run with Giant.
The good news is that it will probably perform well, just not optimally.
If you don't notice any specific performance related problems, you can
safely ignore the error.

BTW, when compiling with KAME IPSEC, debug.mpsafenet=1 will be forced, you
don't actually need the NET_WITH_GIANT option; that option basically does
the same thing as the statement in the KAME code that says
"NET_NEEDS_GIANT"). 

Robert N M Watson             FreeBSD Core Team, TrustedBSD Projects
robert@fledge.watson.org      Principal Research Scientist, McAfee Research