FAST_IPSEC bug fix

[Sam Leffler]

On Apr 25, 2004, at 7:39 PM, Mike Tancsa wrote:

> On Sat, 24 Apr 2004 12:58:14 -0700, in sentex.lists.freebsd.hackers
> you wrote:
>>
>> Running FAST IPSEC w/o h/w crypto is still faster than KAME IPsec.  
>> See
>> the results in my BSDCon paper.
>>
>> 	Sam
>
> But there is no one to maintain and merge bugfixes into FAST_IPSEC
> from KAME  The KAME stack might be slower, but there is active
> (relative to FAST_IPSEC) development.

You said that because of a bug w/ the hifn card that you cannot/will 
not use FAST IPsec.  I said that's not  a reason to not use it, that 
even w/o hardware acceleration it's still faster than KAME.

Unfortunately the policy is that I cannot MFC something w/o it first 
going in -current.  I'll try to test the change under -current this 
week but if someone else could do it then a commit would happen sooner.

	Sam