Subject: Re: Reminder that we are supporting two parallel IPsec implementations
To: None <itojun@iijlab.net>
From: Jonathan Stone <jonathan@DSG.Stanford.EDU>
List: tech-net
Date: 09/11/2003 16:08:48 
>	i don't understand why sys/netipsec has to have another PF_KEY
>	implementation.  could you tell me why?


Sam Leffler's fast-ipsec is a rework in detail, to improve performance
The re-implemenetation of PF_KEY is part and parcel of that "rework in
detail".  I understand the rework is ongoing (that is, more performance
enhancments are planned), but you'd be better off asking Sam.