Perry,

If we integrate IPsec into the NetBSD kernel in a US repository,
doesn't that mean we won't be able to export the integrated kernel?

That'd probably mean maintaining a non-IPsec kernel tree, either with
IPsec add-ins in domestic/sys or two separate IP stacks (ugh).

Anyone looked at the mechanics of this for the various IPsec stacks?