Date: Mon, 3 Sep 2018 17:23:57 +0700 From: Eugene Grosbein <eugen@grosbein.net> To: Runer <run00er@gmail.com>, freebsd-net@freebsd.org Subject: Re: Ipfw fwd with route(8) RTF_BLACKHOLE and fast forwarding on FreeBSD 11 Message-ID: <4f401425-f162-7949-5496-29dc7d269f1a@grosbein.net> In-Reply-To: <10c4591a-3d82-bddb-093d-a73da1d9b2b8@grosbein.net> References: <99f99bf0-59ef-11e7-d1a4-c34a40492308@gmail.com> <10c4591a-3d82-bddb-093d-a73da1d9b2b8@grosbein.net>
next in thread | previous in thread | raw e-mail | index | archive | help
> As temporary workaround, you still can disable fast forwarding path: > > - make sure you use GENERIC kernel or your custom kernel has "options IPSEC_SUPPORT" like GENERIC has; > - load ipsec kernel module by means of /boot/loader.conf or /etc/rc.conf; > - add dummy security policy: > > printf "flush;\nspdflush;\n\nspdadd 100.64.0.1/32 100.64.0.2/32 esp -P out none;\n" > /etc/ipsec.conf - finally, do: echo ipsec_enable=YES >> /etc/rc.conf > It does nothing but prevents a kernel from using fast forwarding path for 11.2
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4f401425-f162-7949-5496-29dc7d269f1a>