svn commit: r306103 - releng/11.0/release/doc/en_US.ISO8859-1/relnotes

[Glen Barber]

On Wed, Sep 21, 2016 at 05:09:47PM +0200, Harry Schmalzbauer wrote:
>  Bezüglich Glen Barber's Nachricht vom 21.09.2016 16:19 (localtime):
> > Author: gjb
> > Date: Wed Sep 21 14:19:01 2016
> > New Revision: 306103
> > URL: https://svnweb.freebsd.org/changeset/base/306103
> >
> > Log:
> >   Document r291292, if_enc(4) addition.
> >   
> >   Submitted by:	ae
> >   Approved by:	re (implicit)
> >   Sponsored by:	The FreeBSD Foundation
> >
> > Modified:
> >   releng/11.0/release/doc/en_US.ISO8859-1/relnotes/article.xml
> >
> > Modified: releng/11.0/release/doc/en_US.ISO8859-1/relnotes/article.xml
> > ==============================================================================
> > --- releng/11.0/release/doc/en_US.ISO8859-1/relnotes/article.xml	Wed Sep 21 14:15:15 2016	(r306102)
> > +++ releng/11.0/release/doc/en_US.ISO8859-1/relnotes/article.xml	Wed Sep 21 14:19:01 2016	(r306103)
> > @@ -1433,6 +1433,12 @@
> >  	arch="arm64">Initial <acronym>SMP</acronym> support has been
> >  	added to the &os;/&arch.arm64; port.</para>
> >  
> > +      <para revision="291292" contrib="sponsor" sponsor="&yandex;">The
> > +	&man.enc.4; driver has been added, providing an interface
> > +	through which <acronym>IPSEC</acronym> can be used via
> > +	&man.kldload.8; without requiring additional kernel and/or
> > +	userland changes.</para>
> 
> Please correct me if I'm wrong, but if_enc(4) has been present at least
> since 9.x.
> In my opinion (non-native english speaker), the paragraph is misleading.
> if_enc(4) cannot be »used« for IPSec, but proviedes access to
> decapsulated ESP traffic processd in kernel space.
> I would understand this paragraph as if I could construct any kind of
> VPN(IPSec)-tunnel with if_enc(4).
> Mybe it's just me, please jump in experts!
> 

I misread the change, it should say the enc(4) driver can now be loaded
via kldload(8), whereas it was necessary to include in the kernel config
before 11.0 (if I am now properly reading the change correctly).

Glen

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/svn-src-all/attachments/20160921/8e4b7291/attachment.sig>