[Bug 228854] loaded pf.ko module prevents ipsec.ko from loading for VIMAGE/VNET enabled kernel

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=228854

--- Comment #13 from commit-hook at freebsd.org ---
A commit references this bug:

Author: bz
Date: Tue Oct 30 20:45:15 UTC 2018
New revision: 339930
URL: https://svnweb.freebsd.org/changeset/base/339930

Log:
  With more excessive use of modules, more kernel parts working with
  VIMAGE, and feature richness and global state increasing the 8k of
  vnet module space are no longer sufficient for people and loading
  multiple modules, e.g., pf(4) and ipl(4) or ipsec(4) will fail on
  the second module.

  Increase the module space to 8 * PAGE_SIZE which should be enough
  to hold multiple firewalls, ipsec, multicast (as in the old days was
  a problem), epair, carp, and any kind of other vnet enabled modules.

  Sadly this is a global byte array part of the vnet_set, so we cannot
  dynamically change its size;  otherwise a TUNABLE would have been
  a better solution.

  PR:                   228854
  Reported by:          Ernie Luzar, Marek Zarychta
  Discussed with:               rgrimes on current
  MFC after:            3 days

Changes:
  head/sys/net/vnet.c

-- 
You are receiving this mail because:
You are on the CC list for the bug.