From owner-freebsd-current@FreeBSD.ORG Tue Jul 3 12:22:48 2007 Return-Path: X-Original-To: current@freebsd.org Delivered-To: freebsd-current@FreeBSD.ORG Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 3A27416A41F; Tue, 3 Jul 2007 12:22:48 +0000 (UTC) (envelope-from gnn@neville-neil.com) Received: from mrout2.yahoo.com (mrout2.yahoo.com [216.145.54.172]) by mx1.freebsd.org (Postfix) with ESMTP id 28F9E13C44B; Tue, 3 Jul 2007 12:22:47 +0000 (UTC) (envelope-from gnn@neville-neil.com) Received: from minion.local.neville-neil.com (proxy8.corp.yahoo.com [216.145.48.13]) by mrout2.yahoo.com (8.13.6/8.13.6/y.out) with ESMTP id l63CLnnB032887; Tue, 3 Jul 2007 05:21:49 -0700 (PDT) Date: Tue, 03 Jul 2007 21:21:45 +0900 Message-ID: From: gnn@freebsd.org To: current@freebsd.org, net@freebsd.org User-Agent: Wanderlust/2.14.0 (Africa) SEMI/1.14.6 (Maruoka) FLIM/1.14.8 (=?ISO-8859-4?Q?Shij=F2?=) APEL/10.7 Emacs/22.0.95 (i386-apple-darwin8.8.2) MULE/5.0 (SAKAKI) MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka") Content-Type: text/plain; charset=US-ASCII Cc: Subject: FAST_IPSEC is now IPSEC, please be advised... X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Jul 2007 12:22:48 -0000 Hi, My most recent check-in moves FreeBSD HEAD, soon to be 7.0 into the post Kame era. What was once FAST_IPSEC has been made into IPSEC and the Kame IPsec code has been removed from the tree. We will continue to use and update the Kame IPv6 code but of course there will be no more drops of code from the Kame project as it ended a year ago. Some things about the new IPsec: 1) Hardware Offload Support Support for several vendors hardware accelerators is available by using the new IPsec code. 2) Fine Grained Locking (SMP) One of the major reasons to move to the new codebase and to deprecate the Kame code was that we needed an IPsec stack that was locked for our SMP kernel architecture. 3) Full IPv6 Support One of the missing features of the old FAST_IPSEC code was IPv6 support. IPv6 is now fully supported. The code has been tested in my lab using both home grown tests and the TAHI test suite (http://www.tahi.org) as well by some FreeBSD Developers, notably Bjoern Zeeb, who is also responsible for the user land fixes, as well as numerous patches to the kernel. Please forward problems, and patches to me, or this list. Best, George