IPsec in GENERIC kernel config

[Niki Denev]

On Mon, Apr 27, 2009 at 9:29 PM, Bjoern A. Zeeb
<bzeeb-lists at lists.zabbadoz.net> wrote:
> On Mon, 27 Apr 2009, Sam Leffler wrote:
>
> Hi,
>
>> Jan Melen wrote:
>>>
>>> Hi,
>>>
>>> Again when I compiled a custom kernel just to enable IPsec in the FreeBSD
>>> kernel it came to my mind why is it so that the IPsec is not enabled by
>>> default in the GENERIC kernel configuration file? At least for me the
>>> GENERIC kernel configuration would do just fine if the IPsec would be
>>> enabled in it by default. Now I have to build a custom kernel just for IPsec
>>> btw IPsec is even mandatory for a host supporting IPv6.
>>
>> IPsec incurs a performance hit.  Fix that and it can be enabled in
>> GENERIC.
>
> There is even a PR for this:
> http://www.freebsd.org/cgi/query-pr.cgi?pr=conf/128030
>
> --
> Bjoern A. Zeeb                      The greatest risk is not taking one.

Hello,

Does anyone have any numbers on how much the performance degrades with
IPSEC enabled? I'm just curious.

Regards,
Niki