From owner-freebsd-current@FreeBSD.ORG Fri Oct 29 05:52:13 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B8F3616A4D1 for ; Fri, 29 Oct 2004 05:52:13 +0000 (GMT) Received: from expert.ukrtel.net (expert.ukrtel.net [195.5.6.10]) by mx1.FreeBSD.org (Postfix) with ESMTP id E468143D54 for ; Fri, 29 Oct 2004 05:52:11 +0000 (GMT) (envelope-from astesin@ukrtelecom.net) Received: from hoexch005.sl.ukrtelecom.net (sltrans.ukrtel.net [195.5.37.133]) by expert.ukrtel.net (Netscape Messaging Server 3.5) with ESMTP id AAA115D for ; Fri, 29 Oct 2004 08:53:09 +0300 Received: from hoexc010.ho.ukrtelecom.net (hoexc010.ukrtelecom.net [10.10.1.10]) by hoexch005.sl.ukrtelecom.net with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13) id VZDK5RNA; Fri, 29 Oct 2004 08:55:02 +0200 Received: by hoexc010.ukrtelecom.net with Internet Mail Service (5.5.2653.19) id ; Fri, 29 Oct 2004 07:52:07 +0200 Message-ID: <1152675CA9EDD71187130002B3CE5ADA0F58476A@hoexc010.ukrtelecom.net> From: astesin@ukrtelecom.net To: FreeBSD-current@freebsd.org Date: Fri, 29 Oct 2004 07:52:04 +0200 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: text/plain; charset="iso-8859-1" Subject: What is the proper way to build RELENG_5 w/o IPv6 && w/IPSEC ? X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Oct 2004 05:52:13 -0000 Dear FreeBSD team people, While following the thread about IPSEC issues, I'we got somewhat confused, maybe someone will be so kind to spend a minute and tell me the answer: I'm preparing a RELENG_5 (5.3-STABLE) system to act as a network server. IPv4 and IPSEC are the must. VLANs, various tunneling and VPN features also are the must. Zebra w/BGP4 will do routing. And IPv6 is of no use here. What is the recommended way to set up make.conf and kernel config variables in order to get world and kernel *both* automagically satisfy the above requirements, get decent network performance, and at the same time - to avoid building unnessecary IPv6 bells & whistles? (and at the same time - do not break some potentially useful stuff). The machine is P-IV 3.0 w/HTT, Intel S875WP1 motherboard (em0 && fxp0 interfaces). Thank you for your suggestions, Andrew