Re: IPSEC disables TSO

From: Andrew Gallatin <gallatin_at_cs.duke.edu> Date: Thu, 16 Aug 2007 16:43:32 -0400 (EDT) · This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:39:16 UTC

Kip Macy writes:
 > >
 > > Yes, exactly, there needs to be a smarter test that can distingiush if
 > > IPSEC is actually in use on a connection or not; I should have been
 > > more clear about this.  The problem is that I have zero knowledge
 > > about IPSEC, so I have no idea how to do this.
 > >
 > > I'm worried that people will compile IPSEC into the kernel to run an
 > > encrypted tunnel (or the TCP MD5 signature stuff for BGP), and
 > > then be rather surprised that their their "normal" TCP performance
 > > stinks.
 > 
 > Maybe file it as a PR?

Good idea.

http://www.freebsd.org/cgi/query-pr.cgi?pr=115586

Drew