[Bug 128030] [ipsec] Enable IPSec in GENERIC kernel configuration

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=128030

--- Comment #18 from Nick B <nicblais at clkroot.net> ---
(In reply to Mark Felder from comment #17)
Mark, appreciate your response on this.  That said, it is very impractical to
have to compile a new kernel in order to have IPSEC support, a feature FreeBSD
in 2015 (and now 2016) should support natively without hassle.  

Is there no way to have it enabled in kernel, but disabled by default in a
sysctl OID of some kind if there is a performance hit?  That way, the user
could just turn on the IPSEC network code via sysctl.  Also, what kind of hit
are we talking on a modern server?

-- 
You are receiving this mail because:
You are on the CC list for the bug.