Http Accept filters (accf_http)

Poul-Henning Kamp phk at phk.freebsd.dk
Tue Apr 22 21:32:29 UTC 2008


In message <480E589C.8010108 at delphij.net>, Xin LI writes:

>| Does anyone know why accf_accept is disabled by default in the ports'
>| stock Apache 2.2 (it's disabled in the default config files)? I thought
>| it was because it was dangerous or flawed for some reason, though (at
>| least for light loads comparable to those of OP) it seems to work fine.

I think adding them to the apache is OK, as long as apache fails
gracefully if they are not present in the kernel.

>Yes, I wonder that too.  Personally I think it might be a good idea to
>just bind accf_http and accf_data into GENERIC, as I always add them
>into kernel configuration at my company...  My $0.02

No, GENERIC should not be bloated when it can be effortlessly loaded
as a KLD.

-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk at FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.


More information about the freebsd-current mailing list