Page MenuHomeFreeBSD

Enable IPSEC_SUPPORT.
AbandonedPublic

Authored by delphij on Aug 1 2017, 3:13 PM.
Tags
None
Referenced Files
F102843172: D11806.diff
Sun, Nov 17, 9:38 PM
Unknown Object (File)
Wed, Nov 6, 2:26 PM
Unknown Object (File)
Wed, Oct 23, 11:17 AM
Unknown Object (File)
Wed, Oct 23, 9:27 AM
Unknown Object (File)
Oct 16 2024, 7:38 PM
Unknown Object (File)
Oct 16 2024, 7:38 PM
Unknown Object (File)
Oct 16 2024, 7:38 PM
Unknown Object (File)
Oct 16 2024, 7:16 PM

Details

Summary

Enable IPSEC_SUPPORT.

Test Plan

build and load tcpmd5.ko

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 10784
Build 11179: arc lint + arc unit

Event Timeline

What it we replace IPSEC with IPSEC_SUPPORT?
Then the profit will have those

  • who doesn't use IPsec will not rebuild the kernel to avoid overhead
  • who want to use IPsec, they can do kldload ipsec
  • who want to use TCP-MD5, they can do kldload tcpmd5
This revision is now accepted and ready to land.Aug 9 2017, 3:04 PM
glebius requested changes to this revision.Aug 9 2017, 4:54 PM

Sorry for clicking wrong button. I'm seconding ae@: IPSEC_SUPPORT should remain, but IPSEC should be removed. The ipsec.ko and tcpmd5.ko should be loadable, not statically compiled in.

This revision now requires changes to proceed.Aug 9 2017, 4:54 PM

I'm seconding ae@: IPSEC_SUPPORT should remain, but IPSEC should be removed. The ipsec.ko and tcpmd5.ko should be loadable, not statically compiled in.

I'd be fine with both variants.

This revision was automatically updated to reflect the committed changes.
jpaetzel added a subscriber: jpaetzel.

I reverted this commit. We need more consensus before continuing.

Can this be closed? ipsec got removed in D20163