Enable IPSEC_SUPPORT.

[delphij]

Summary

Enable IPSEC_SUPPORT.

Test Plan

build and load tcpmd5.ko

[ae]

What it we replace IPSEC with IPSEC_SUPPORT?
Then the profit will have those

• who doesn't use IPsec will not rebuild the kernel to avoid overhead
• who want to use IPsec, they can do kldload ipsec
• who want to use TCP-MD5, they can do kldload tcpmd5

[glebius]

Sorry for clicking wrong button. I'm seconding ae@: IPSEC_SUPPORT should remain, but IPSEC should be removed. The ipsec.ko and tcpmd5.ko should be loadable, not statically compiled in.

[eugen_grosbein.net]

I'm seconding ae@: IPSEC_SUPPORT should remain, but IPSEC should be removed. The ipsec.ko and tcpmd5.ko should be loadable, not statically compiled in.

I'd be fine with both variants.

[gnn]

Sure.

[jpaetzel]

I reverted this commit. We need more consensus before continuing.

[mjg]

Can this be closed? ipsec got removed in D20163

[delphij]

Superseded by D20163