[Bug 228854] loaded pf.ko module prevents ipsec.ko from loading for VIMAGE/VNET enabled kernel

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Fri Nov 2 14:07:54 UTC 2018


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=228854

--- Comment #19 from commit-hook at freebsd.org ---
A commit references this bug:

Author: bz
Date: Fri Nov  2 14:07:07 UTC 2018
New revision: 340051
URL: https://svnweb.freebsd.org/changeset/base/340051

Log:
  MFC r339930:

    With more excessive use of modules, more kernel parts working with
    VIMAGE, and feature richness and global state increasing the 8k of
    vnet module space are no longer sufficient for people and loading
    multiple modules, e.g., pf(4) and ipl(4) or ipsec(4) will fail on
    the second module.

    Increase the module space to 8 * PAGE_SIZE which should be enough
    to hold multiple firewalls, ipsec, multicast (as in the old days was
    a problem), epair, carp, and any kind of other vnet enabled modules.

    Sadly this is a global byte array part of the vnet_set, so we cannot
    dynamically change its size;  otherwise a TUNABLE would have been
    a better solution.

  PR:                   228854

Changes:
_U  stable/11/
  stable/11/sys/net/vnet.c

-- 
You are receiving this mail because:
You are on the CC list for the bug.


More information about the freebsd-net mailing list