RELENG_5 and FAST_IPSEC limits

Sam Leffler sam at errno.com
Wed Mar 16 10:15:36 PST 2005


Hajimu UMEMOTO wrote:

> KAME/NetBSD does it throuth sysctl.  Since sysctl API is slightly
> different between NetBSD and FreeBSD, I didn't merge it, yet.
> Please try attached patch.  This is mainly taken from NetBSD.
> There is corresponding code in racoon, already.  Please make sure to
> copy sys/netkey/key_var.h into /usr/include/netkey/ before recompiling
> racoon.

Note the change lacks any locking so if your SA db is changing there's a 
good chance you'll blow up.

	Sam



More information about the freebsd-stable mailing list