[Bug 228854] loaded pf.ko module prevents ipsec.ko from loading for VIMAGE/VNET enabled kernel

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=228854

--- Comment #17 from commit-hook at freebsd.org ---
A commit references this bug:

Author: bz
Date: Wed Oct 31 12:50:40 UTC 2018
New revision: 339951
URL: https://svnweb.freebsd.org/changeset/base/339951

Log:
  MFC r339930:

     With more excessive use of modules, more kernel parts working with
     VIMAGE, and feature richness and global state increasing the 8k of
     vnet module space are no longer sufficient for people and loading
     multiple modules, e.g., pf(4) and ipl(4) or ipsec(4) will fail on
     the second module.

     Increase the module space to 8 * PAGE_SIZE which should be enough
     to hold multiple firewalls, ipsec, multicast (as in the old days was
     a problem), epair, carp, and any kind of other vnet enabled modules.

     Sadly this is a global byte array part of the vnet_set, so we cannot
     dynamically change its size;  otherwise a TUNABLE would have been
     a better solution.

  PR:                   228854
     Reported by:       Ernie Luzar, Marek Zarychta

  Approved by:  re (kib)

Changes:
_U  stable/12/
  stable/12/sys/net/vnet.c

-- 
You are receiving this mail because:
You are on the CC list for the bug.