IPSEC documentation

Brian Candler B.Candler at pobox.com
Thu Dec 29 04:25:55 PST 2005


On Thu, Dec 29, 2005 at 09:50:47AM +0300, Alexey Popov wrote:
> If we would also have NAT-T support, FreeBSD would be the best choice 
> of VPN concentrator.

/usr/ports/security/ipsec-tools/pkg-descr says:

"Known issues:
- Non-threaded implementation.  Simultaneous key negotiation performance
  should be improved."

I think that would limit its usefulness as a scalable concentrator, if the
comment is still valid.


More information about the freebsd-net mailing list