Getting started with ktls

[Benjamin Kaduk]

On Sun, Mar 14, 2021 at 09:54:33AM -0600, Alan Somers wrote:
> On Sun, Mar 14, 2021 at 8:57 AM tech-lists <tech-lists at zyxst.net> wrote:
> 
> > I'd like to have it (ktls) available on the ARM64
> > stable/13-n244876-0b45290603b. Is it just a matter of adding the option,
> > and then the sysctls become available? Is it "better" with openssl[-devel]
> > in ports or openssl in base?
> >
> > thanks,
> > --
> > J.\
> 
> 
> It's present in current kernels for both 13 and 14, amd64 and aarch64.
> However, it's not present in 13's openssl.  To use it, you must either
> rebuild world with  WITH_OPENSSL_KTLS=YES in /etc/src.conf, install
> security/openssl-devel from pkg, or built security/openssl from ports with
> the KTLS option enabled.  I don't know if any version of openssl is
> "better" than another.  The sysctls should be available in any case.

security/openssl-devel is alpha-quality software; I don't recommend running
it in production.

-Ben