Subject: Re: IPsec policy cache hint
To: Jonathan Stone <>
From: Jason Thorpe <>
List: tech-net
Date: 03/16/2004 16:25:41
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII; format=flowed

On Mar 16, 2004, at 4:04 PM, Jonathan Stone wrote:

> I'm in the midst of merging that into my own copy, which contains
> other FreeBSD-derived code (including the TCP-md5 check, and various
> baby-steps towards INET6.) and I'd I'd like to change all the
> PCB-cache related ``#ifdef __NetBSD__'' tests to ``#ifdef
> IPSEC_PCBCACHE'', to separate them from truly NetBSD-specific code and
> so the PCB cache can be turned on for FreeBSD.

It's truly NetBSD-specific; calls to the appropriate functions must be 
made from non-IPsec code in order for it to work properly.  Until 
FreeBSD's code makes such calls, it seems appropriate to keep the 
#ifdef as-is.

         -- Jason R. Thorpe <>

content-type: application/pgp-signature; x-mac-type=70674453;
content-description: This is a digitally signed message part
content-disposition: inline; filename=PGP.sig
content-transfer-encoding: 7bit

Version: GnuPG v1.2.3 (Darwin)