IPsec in GENERIC kernel config

Sam Leffler sam at freebsd.org
Mon Apr 27 18:08:40 UTC 2009

Jan Melen wrote:
> Hi,
> Again when I compiled a custom kernel just to enable IPsec in the 
> FreeBSD kernel it came to my mind why is it so that the IPsec is not 
> enabled by default in the GENERIC kernel configuration file? At least 
> for me the GENERIC kernel configuration would do just fine if the 
> IPsec would be enabled in it by default. Now I have to build a custom 
> kernel just for IPsec btw IPsec is even mandatory for a host 
> supporting IPv6.
IPsec incurs a performance hit.  Fix that and it can be enabled in GENERIC.


More information about the freebsd-hackers mailing list