From owner-freebsd-stable@FreeBSD.ORG Mon Feb 27 15:53:49 2012 Return-Path: Delivered-To: stable@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 8D3A71065672; Mon, 27 Feb 2012 15:53:49 +0000 (UTC) (envelope-from lukasz@wasikowski.net) Received: from bijou.wasikowski.net (bijou.wasikowski.net [IPv6:2001:808:10f::1]) by mx1.freebsd.org (Postfix) with ESMTP id 3E2518FC18; Mon, 27 Feb 2012 15:53:49 +0000 (UTC) Received: from bijou.wasikowski.net (localhost [127.0.0.1]) by bijou.wasikowski.net (Postfix) with ESMTP id B0E795C08F; Mon, 27 Feb 2012 16:53:47 +0100 (CET) X-Virus-Scanned: amavisd-new at wasikowski.net Received: from bijou.wasikowski.net ([127.0.0.1]) by bijou.wasikowski.net (bijou.wasikowski.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GEh7trjqF8MM; Mon, 27 Feb 2012 16:53:44 +0100 (CET) Received: from [192.168.138.150] (cadera.waw.pl [62.121.127.119]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by bijou.wasikowski.net (Postfix) with ESMTPSA id 7EF8D5C01A; Mon, 27 Feb 2012 16:53:44 +0100 (CET) Message-ID: <4F4BA707.5070608@wasikowski.net> Date: Mon, 27 Feb 2012 16:53:43 +0100 From: =?UTF-8?B?xYF1a2FzeiBXxIVzaWtvd3NraQ==?= User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:10.0.2) Gecko/20120216 Thunderbird/10.0.2 MIME-Version: 1.0 To: "Bjoern A. Zeeb" References: <20120221143537.Horde.deyFDZjmRSRPQ52pxBIpnLA@webmail.leidinger.net> In-Reply-To: X-Enigmail-Version: 1.3.5 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: Alexander Leidinger , stable@FreeBSD.org, current@FreeBSD.org Subject: Re: [CFT] modular kernel config X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Feb 2012 15:53:49 -0000 W dniu 2012-02-22 23:31, Bjoern A. Zeeb pisze: > You cannot ship that on by default for non-tecnical reasons in a kernel. Please do not commit a kernel config that can be booted (no LINT cannot be booted) with these on without consulting appropriate hats upfront. > > >> - ALTQ >> - SW_WATCHDOG >> - QUOTA >> - IPSTEALTH (disabled in loader.conf) >> - IPFIREWALL_FORWARD (touches every packet, power users which need >> a bigger PPS but not this feature can recompile the kernel, >> discussed with julian@) >> - FLOWTABLE (disabled in loader.conf) > Which is not the same as it's not 100% disabled and will still allocate memory. FLOWTABLE on 8.x crashed BGP routers (kern/144917). I don't know if it is fixed by now, but this kind of potential problematic features should not be enabled by default. -- best regards, Lukasz Wasikowski