From owner-freebsd-net@FreeBSD.ORG  Sat Sep 14 12:33:51 2013
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTP id C8584735
 for <freebsd-net@freebsd.org>; Sat, 14 Sep 2013 12:33:51 +0000 (UTC)
 (envelope-from rmh.aybabtu@gmail.com)
Received: from mail-pd0-x233.google.com (mail-pd0-x233.google.com
 [IPv6:2607:f8b0:400e:c02::233])
 (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
 (No client certificate requested)
 by mx1.freebsd.org (Postfix) with ESMTPS id A3F61246D
 for <freebsd-net@freebsd.org>; Sat, 14 Sep 2013 12:33:51 +0000 (UTC)
Received: by mail-pd0-f179.google.com with SMTP id v10so2320494pde.24
 for <freebsd-net@freebsd.org>; Sat, 14 Sep 2013 05:33:51 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=sender:message-id:date:from:mime-version:to:cc:subject:content-type
 :content-transfer-encoding;
 bh=apZ54tyXGn5upoqaZmB67BYrr6hYVkVVi6sb0fyX7wg=;
 b=ETfeSTJGyf7Mlvm20oJyAKw2Z4vu4vWy5ABw8aZdbRGwyizXrJJbRSjQaOeMZJo5kX
 GPiid6qFImZuL0P4QzWR/zosPgYA1YAeCVF2h0K4FJtVzi/j1SnryyR5bUISfrEwxzcf
 6t4MGzP3zWwy7MIw501o4ER1xegnhe/TYX29V5+vOVGhtkc7hc5gzuV91jeRt+ZdHKb7
 S70MtNk4ln/FtEQqcli9Xudstc3EGRPZxCZznfgHOe89k2FXCmhV8OkdwyV/hQ0/XmtP
 xQnI5Gk7dZlWpHnDvBn3BaD8FX7c/KGo7+jYcxAu+K8vdueDSkXZd/h2cec4doae6gEv
 pnnQ==
X-Received: by 10.68.232.3 with SMTP id tk3mr1827472pbc.121.1379162031183;
 Sat, 14 Sep 2013 05:33:51 -0700 (PDT)
Received: from 127.0.0.1 (herngaard.torservers.net. [96.44.189.102])
 by mx.google.com with ESMTPSA id va8sm1237175pbc.16.1969.12.31.16.00.00
 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
 Sat, 14 Sep 2013 05:33:50 -0700 (PDT)
Sender: Robert Millan <rmh.aybabtu@gmail.com>
Message-ID: <523457A1.3090606@debian.org>
Date: Sat, 14 Sep 2013 12:33:37 +0000
From: Robert Millan <rmh@debian.org>
MIME-Version: 1.0
To: freebsd-net@freebsd.org
Subject: IPSEC
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Cc: "debian-bsd@lists.debian.org" <debian-bsd@lists.debian.org>
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 14 Sep 2013 12:33:51 -0000


Hi!

Is there any particular reason (performance, stability concerns...)
IPSEC support is not enabled in GENERIC?

In Debian GNU/kFreeBSD we're considering enabling it in our default
builds, due to increased user demand and as it is already enabled for
our Linux-based flavours.

However we're concerned about diverging from FreeBSD as there might be
unforeseen consequences. Is there any specific concern on your side?

If not, perhaps it could be considered for HEAD after 10.0 release?

Thanks!

-- 
Robert Millan