Enable IPSEC_SUPPORT.
Details
Details
- Reviewers
ae gnn eugen_grosbein.net glebius manu - Group Reviewers
network - Commits
- rS323087: Take options IPSEC out of GENERIC
build and load tcpmd5.ko
Diff Detail
Diff Detail
- Repository
- rS FreeBSD src repository - subversion
- Lint
Lint Passed - Unit
No Test Coverage - Build Status
Buildable 10784 Build 11179: arc lint + arc unit
Event Timeline
Comment Actions
What it we replace IPSEC with IPSEC_SUPPORT?
Then the profit will have those
- who doesn't use IPsec will not rebuild the kernel to avoid overhead
- who want to use IPsec, they can do kldload ipsec
- who want to use TCP-MD5, they can do kldload tcpmd5
Comment Actions
Sorry for clicking wrong button. I'm seconding ae@: IPSEC_SUPPORT should remain, but IPSEC should be removed. The ipsec.ko and tcpmd5.ko should be loadable, not statically compiled in.
Comment Actions
I'm seconding ae@: IPSEC_SUPPORT should remain, but IPSEC should be removed. The ipsec.ko and tcpmd5.ko should be loadable, not statically compiled in.
I'd be fine with both variants.