A radical restructuring of IPsec...

Fri Apr 6 15:05:24 UTC 2007

gnn at freebsd.org wrote:

> The patch removes Kame derived IPsec from the tree, and adds v6
> support to FAST_IPSEC.  The IPSEC kernel option is removed, but the
> FAST_IPSEC option remains. This is a test patch and has a known
> problem with routing packets through a node.  Nodes can operate in a
> host mode, that is they are the endpoint of a tunnel.

Just a quick question: Is the reason for this simplification, 
performance, cleanup (I see spl...() functions removed), or something else?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 249 bytes
Desc: OpenPGP digital signature
Url : http://lists.freebsd.org/pipermail/freebsd-net/attachments/20070406/a3477776/signature.pgp