From owner-freebsd-net@freebsd.org  Mon Feb  6 09:08:15 2017
Return-Path: <owner-freebsd-net@freebsd.org>
Delivered-To: freebsd-net@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 31309CD2C6D;
 Mon,  6 Feb 2017 09:08:15 +0000 (UTC) (envelope-from ae@FreeBSD.org)
Received: from butcher-nb.yandex.net (freefall.freebsd.org
 [IPv6:2610:1c1:1:6074::16:84])
 by mx1.freebsd.org (Postfix) with ESMTP id 5EA4D1908;
 Mon,  6 Feb 2017 09:08:14 +0000 (UTC) (envelope-from ae@FreeBSD.org)
Subject: Re: [RFC/RFT] projects/ipsec
To: freebsd-current@FreeBSD.org, freebsd-net@FreeBSD.org
References: <2bd32791-944f-2417-41e9-e0fe1c705502@FreeBSD.org>
From: "Andrey V. Elsukov" <ae@FreeBSD.org>
Message-ID: <400b1efb-f770-b41b-805a-a755236da85b@FreeBSD.org>
Date: Mon, 6 Feb 2017 12:07:00 +0300
User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:45.0) Gecko/20100101
 Thunderbird/45.6.0
MIME-Version: 1.0
In-Reply-To: <2bd32791-944f-2417-41e9-e0fe1c705502@FreeBSD.org>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.23
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net/>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 06 Feb 2017 09:08:15 -0000

On 11.12.2016 02:07, Andrey V. Elsukov wrote:
> I am pleased to announce that projects/ipsec, that I started several
> months ago is ready for testing and review.
> The main goals were:
>   * rework locking to make IPsec code more friendly for concurrent
>     processing;
>   * make lookup in SADB/SPDB faster;
>   * revise PFKEY implementation, remove stale code, make it closer
>     to RFC;
>   * implement IPsec VTI (virtual tunneling interface);
>   * make IPsec code loadable as kernel module.

JFYI, the project was merged into head/ in r313330.

-- 
WBR, Andrey V. Elsukov