Re: enabling bridge_ipf

[Maxime Villard <max%m00nbsd.net@localhost>]

Le 11/07/2020 à 15:45, Greg Troxel a écrit :
> ...

I don't understand what you mean:

> The only reason not to would be if it created a lot more code and made
> the kernel bigger, or some worry about a few instructions per packet in
> bridging.  Surely it's just a tiny overhead, and it doesn't really make
> sense for bridges to be special vs other interfaces.  (If someone wants
> to compile out PFIL_HOOKS, this should go too.)

PFIL_HOOKS is IPF-specific, not related to bridges, and hard-enabled as far
as I can tell (ie, not an option).

> So my only request is to do a test compile with PFIL off.

There is no PFIL option available. "pfil" is a small set of functions which
are unconditionally part of the kernel.

Maxime