ipsec changes in 5.2R

[Guido van Rooij]

On Wed, Feb 04, 2004 at 01:21:47PM -0800, Crist J. Clark wrote:
> On Wed, Feb 04, 2004 at 10:19:33PM +1100, Andrew Thomson wrote:
> > Thanks, that worked a treat for me too.. everything back to normal!
> > 
> > So what's the go with this fast_ipsec business. Is this going to be the
> > main implementation for Freebsd?
> 
> I believe the main reason FAST_IPSEC came to be is support for crypto
> hardware.
> 
> However, FAST_IPSEC cannot replace KAME IPsec. FAST_IPSEC is IPv4-only
> whereas KAME is IPv6 with its required IPsec abilities "back-ported"
> into the IPv4 stack.
> 
> It would be really, really nice to get this bug out of KAME IPsec
> before 5.2.1, but if 5.2 didn't wait...


True. Is KAME aware of this problem or is it FBSD specific?

-Guido