svn commit: r306103 - releng/11.0/release/doc/en_US.ISO8859-1/relnotes

[Harry Schmalzbauer]

 Bezüglich Glen Barber's Nachricht vom 21.09.2016 16:19 (localtime):
> Author: gjb
> Date: Wed Sep 21 14:19:01 2016
> New Revision: 306103
> URL: https://svnweb.freebsd.org/changeset/base/306103
>
> Log:
>   Document r291292, if_enc(4) addition.
>   
>   Submitted by:	ae
>   Approved by:	re (implicit)
>   Sponsored by:	The FreeBSD Foundation
>
> Modified:
>   releng/11.0/release/doc/en_US.ISO8859-1/relnotes/article.xml
>
> Modified: releng/11.0/release/doc/en_US.ISO8859-1/relnotes/article.xml
> ==============================================================================
> --- releng/11.0/release/doc/en_US.ISO8859-1/relnotes/article.xml	Wed Sep 21 14:15:15 2016	(r306102)
> +++ releng/11.0/release/doc/en_US.ISO8859-1/relnotes/article.xml	Wed Sep 21 14:19:01 2016	(r306103)
> @@ -1433,6 +1433,12 @@
>  	arch="arm64">Initial <acronym>SMP</acronym> support has been
>  	added to the &os;/&arch.arm64; port.</para>
>  
> +      <para revision="291292" contrib="sponsor" sponsor="&yandex;">The
> +	&man.enc.4; driver has been added, providing an interface
> +	through which <acronym>IPSEC</acronym> can be used via
> +	&man.kldload.8; without requiring additional kernel and/or
> +	userland changes.</para>

Please correct me if I'm wrong, but if_enc(4) has been present at least
since 9.x.
In my opinion (non-native english speaker), the paragraph is misleading.
if_enc(4) cannot be »used« for IPSec, but proviedes access to
decapsulated ESP traffic processd in kernel space.
I would understand this paragraph as if I could construct any kind of
VPN(IPSec)-tunnel with if_enc(4).
Mybe it's just me, please jump in experts!

Thanks,

-Harry