From owner-freebsd-current@FreeBSD.ORG Thu Aug 16 20:10:12 2007 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 0092316A419 for ; Thu, 16 Aug 2007 20:10:12 +0000 (UTC) (envelope-from kip.macy@gmail.com) Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.191]) by mx1.freebsd.org (Postfix) with ESMTP id 72B9213C459 for ; Thu, 16 Aug 2007 20:10:11 +0000 (UTC) (envelope-from kip.macy@gmail.com) Received: by nf-out-0910.google.com with SMTP id b2so216388nfb for ; Thu, 16 Aug 2007 13:10:10 -0700 (PDT) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=J9fjfrrFXw9uGoGV/Pf6bU4q9i1eljcCzeZBRquxpaiHnrAYfKhXzroar8G6NZtObaVhSFS9uxKmgKDtRKoLHAV4XOxQ0rA6IP4z9YfOYWX+4dhJbL9KLmzYPk5NAmylPHgYEM+zc7oisQHTxzPpQuvGYL2zLjaLLm5MPseBSDM= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=Scgr2oQ6RKhFieBFoK9hlUj/UoUrtS6XDTYFkHZb1sJlqSIPdRgfS63FbkLmEyp26gqTJnRcexTHBZ3HWYzz63rZ4apPLTWHOA0zZjGonpnMRgRH+PPOhACZ7wPFj3EMy5gn+Sop604I5pWSlET6rJ5XW66Dk5FDEu744HnX1xA= Received: by 10.78.200.20 with SMTP id x20mr791845huf.1187295009640; Thu, 16 Aug 2007 13:10:09 -0700 (PDT) Received: by 10.78.162.18 with HTTP; Thu, 16 Aug 2007 13:10:09 -0700 (PDT) Message-ID: Date: Thu, 16 Aug 2007 13:10:09 -0700 From: "Kip Macy" To: "Andrew Gallatin" In-Reply-To: <18116.44624.144286.621286@grasshopper.cs.duke.edu> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <18116.43755.107638.103132@grasshopper.cs.duke.edu> <18116.44624.144286.621286@grasshopper.cs.duke.edu> Cc: freebsd-current@freebsd.org Subject: Re: IPSEC disables TSO X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Aug 2007 20:10:12 -0000 > > Yes, exactly, there needs to be a smarter test that can distingiush if > IPSEC is actually in use on a connection or not; I should have been > more clear about this. The problem is that I have zero knowledge > about IPSEC, so I have no idea how to do this. > > I'm worried that people will compile IPSEC into the kernel to run an > encrypted tunnel (or the TCP MD5 signature stuff for BGP), and > then be rather surprised that their their "normal" TCP performance > stinks. Maybe file it as a PR? -Kip