dis/advantages of compiling in-kernel over kldload
Date: Wed, 12 Jul 2023 17:45:02 UTC
Hello hackers@
(for context this is on recent -current)
in man(4) pf we have
SYNOPSIS
device pf
options PF_DEFAULT_TO_DROP
no real mention if it being loaded in rc.conf.
But when it is loaded in (just) rc.conf with pf_enable=YES
it gets loaded as a kld.
Is there an advantage in compiling it in the kernel?
Is there a disadvantage in it being compiled in the kernel?
If it's compiled in the kernel, does the system still require
pf_enable=YES in rc.conf?
--