Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 31 Dec 2015 19:58:58 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-net@FreeBSD.org
Subject:   [Bug 128030] [ipsec] Enable IPSec in GENERIC kernel configuration
Message-ID:  <bug-128030-2472-CED4BFY1uu@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-128030-2472@https.bugs.freebsd.org/bugzilla/>
References:  <bug-128030-2472@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=128030

--- Comment #18 from Nick B <nicblais@clkroot.net> ---
(In reply to Mark Felder from comment #17)
Mark, appreciate your response on this.  That said, it is very impractical to
have to compile a new kernel in order to have IPSEC support, a feature FreeBSD
in 2015 (and now 2016) should support natively without hassle.  

Is there no way to have it enabled in kernel, but disabled by default in a
sysctl OID of some kind if there is a performance hit?  That way, the user
could just turn on the IPSEC network code via sysctl.  Also, what kind of hit
are we talking on a modern server?

-- 
You are receiving this mail because:
You are on the CC list for the bug.


Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-128030-2472-CED4BFY1uu>