Re: [CFT] modular kernel config

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/27/12 10:53, Łukasz Wąsikowski wrote:
> W dniu 2012-02-22 23:31, Bjoern A. Zeeb pisze:
> 
>> You cannot ship that on by default for non-tecnical reasons in a
>> kernel.  Please do not commit a kernel config that can be booted
>> (no LINT cannot be booted) with these on without consulting
>> appropriate hats upfront.
>> 
>> 
>>> - ALTQ - SW_WATCHDOG - QUOTA - IPSTEALTH (disabled in
>>> loader.conf) - IPFIREWALL_FORWARD (touches every packet, power
>>> users which need a bigger PPS but not this feature can
>>> recompile the kernel, discussed with julian_at_) - FLOWTABLE
>>> (disabled in loader.conf)
>> Which is not the same as it's not 100% disabled and will still
>> allocate memory.
> 
> FLOWTABLE on 8.x crashed BGP routers (kern/144917). I don't know if
> it is fixed by now, but this kind of potential problematic features
> should not be enabled by default.
> 

Agree, I've run into problems with FLOWTABLE (with just the features
that were enabled by default in 8.0) when routers changed MAC
addresses. As far as I understand it, FLOWTABLE is both broken and
abandoned (but if I'm wrong, please let me know).

So, IMHO, not only should it not be enabled by default, but given that
it was disabled complete in 8.x after 8.0 (too lazy to look at exactly
when right now), I think it shouldn't even be included, since that
might encourage users to try it out only to encounter problems with it.

Steve
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (FreeBSD)

iQEcBAEBAgAGBQJPTD/nAAoJEPXPYrMgexuhvWAH/iPa0N32GJXdyL7OdqFNNuEN
R/Z0tOqTCCmAm4WsbAbN3m5poBKNctRtQxG40XoqmvZAWlomwYCwpS2xgCX60NZO
XhspUEpQ7cHQpt6ZOW12x3G6FZJ4DzFX0+mDPYxE/7YmwtsjZFeTFGVEPezeKQwr
Khar5jWYqETmM1+mFvAFXnfTUiBwnqErDfYmHQAE93wKQd9CyzrFmDfooNTiMUB6
yW+piexN/SzXz6nftQesJbFOWUW6fvhxe9TYcK8+b9zCo2GxPuUrRV60PKQX0apd
nlKWtj49znLVzmpTYboQnvmqmk+yik8wL2wszUaZ4jAjieCjWOhJwCWOvkQ9yIg=
=SBbK
-----END PGP SIGNATURE-----