Subject: Re: IPSEC disabled by default - why?
To: None <current-users@NetBSD.org>
From: Matthias Scheler <tron@zhadum.de>
List: current-users
Date: 06/17/2004 20:23:35
In article <20040617164707.GA2534@boogers.sf.ca.us>,
Jeff Rizzo <riz@redcrowgroup.com> writes:
> I was just curious what the reason is that IPSEC is disabled in pretty
> much _all_ the kernel configs that ship with NetBSD,
Because having IPSec (the KAME implementation, I don't know about fast IPSec)
in the kernel slows down networking. That happens if you don't use it at all.
Kind regards
--
Matthias Scheler http://scheler.de/~matthias/