Re: [RFC/RFT] projects/ipsec

2017-02-06 Thread Andrey V. Elsukov
On 06.02.2017 16:27, peter.b...@bsd4all.org wrote: Andrey, Is this going to MFC'ed to stable-11 in the future? I have tested with current and found no issues, but I would like to add it to a semi-production environment running stable-11 Hi, I thought to make MFC after a month or two, but I d

Re: [RFC/RFT] projects/ipsec

2017-02-06 Thread peter . blok
Andrey, Is this going to MFC'ed to stable-11 in the future? I have tested with current and found no issues, but I would like to add it to a semi-production environment running stable-11 Peter > On 6 Feb 2017, at 10:07, Andrey V. Elsukov wrote: > > On 11.12.2016 02:07, Andrey V. Elsukov wrot

Re: [RFC/RFT] projects/ipsec

2017-02-06 Thread Andrey V. Elsukov
On 11.12.2016 02:07, Andrey V. Elsukov wrote: I am pleased to announce that projects/ipsec, that I started several months ago is ready for testing and review. The main goals were: * rework locking to make IPsec code more friendly for concurrent processing; * make lookup in SADB/SPDB faste

Re: [RFC/RFT] projects/ipsec

2017-01-13 Thread Alexandr Krivulya
11.12.2016 01:07, Andrey V. Elsukov пишет: Hi All, I am pleased to announce that projects/ipsec, that I started several months ago is ready for testing and review. The main goals were: * rework locking to make IPsec code more friendly for concurrent processing; * make lookup in SADB/S

Re: [RFC/RFT] projects/ipsec

2017-01-10 Thread Andrey V. Elsukov
Hi All, I ported the changes from projects/ipsec to stable/11 branch. So, if it is more suitable for testing, please, welcome. You can checkout the sources from github: https://github.com/bu7cher/freebsd/tree/stable/11 Also I made the standalone patch: https://people.freebsd.org

Re: [RFC/RFT] projects/ipsec

2017-01-09 Thread Andrey V. Elsukov
On 09.01.2017 14:38, Bjoern A. Zeeb wrote: On 27 Dec 2016, at 10:18, Andrey V. Elsukov wrote: So, if there will no objection, I'll merge projects/ipsec into head/ within two weeks. I still keep seeing almost daily changes to the branch and am having a hard time to convince myself to do a prop

Re: [RFC/RFT] projects/ipsec

2017-01-09 Thread Bjoern A. Zeeb
On 27 Dec 2016, at 10:18, Andrey V. Elsukov wrote: So, if there will no objection, I'll merge projects/ipsec into head/ within two weeks. I still keep seeing almost daily changes to the branch and am having a hard time to convince myself to do a proper review that way. I would very much pre

Re: [RFC/RFT] projects/ipsec

2016-12-27 Thread Ermal Luçi
On Tue, Dec 27, 2016 at 6:10 AM, Andrey V. Elsukov wrote: > On 27.12.2016 16:15, Jim Thompson wrote: > >> In it's initial state if_ipsec allows to use only one set of >>> encryption parameters (because only one sainfo anonyumous is >>> possible), so at this time it doesn't allow to create multipl

Re: [RFC/RFT] projects/ipsec

2016-12-27 Thread Andrey V. Elsukov
On 27.12.2016 16:15, Jim Thompson wrote: In it's initial state if_ipsec allows to use only one set of encryption parameters (because only one sainfo anonyumous is possible), so at this time it doesn't allow to create multiple tunnels with VPN hubs that use different cipers and/or transform sets,

Re: [RFC/RFT] projects/ipsec

2016-12-27 Thread Jim Thompson
> In it's initial state if_ipsec allows to use only one set of encryption > parameters (because only one sainfo anonyumous is possible), so at this time > it doesn't allow to create multiple tunnels with VPN hubs that use different > cipers and/or transform sets, but as far as I understand this

Re: [RFC/RFT] projects/ipsec

2016-12-27 Thread Andrey V. Elsukov
On 11.12.2016 02:07, Andrey V. Elsukov wrote: Hi All, I am pleased to announce that projects/ipsec, that I started several months ago is ready for testing and review. The main goals were: * rework locking to make IPsec code more friendly for concurrent processing; * make lookup in SADB/S

Re: [RFC/RFT] projects/ipsec

2016-12-14 Thread Eugene M. Zheganin
Hi, On 11.12.2016 4:07, Andrey V. Elsukov wrote: Hi All, I am pleased to announce that projects/ipsec, that I started several months ago is ready for testing and review. The main goals were: * rework locking to make IPsec code more friendly for concurrent processing; * make lookup in

Re: [RFC/RFT] projects/ipsec

2016-12-13 Thread Olivier Cochard-Labbé
On Sun, Dec 11, 2016 at 12:07 AM, Andrey V. Elsukov wrote: > Hi All, > > I am pleased to announce that projects/ipsec, that I started several > months ago is ready for testing and review. > The main goals were: > * rework locking to make IPsec code more friendly for concurrent > processing;

[RFC/RFT] projects/ipsec

2016-12-10 Thread Andrey V. Elsukov
Hi All, I am pleased to announce that projects/ipsec, that I started several months ago is ready for testing and review. The main goals were: * rework locking to make IPsec code more friendly for concurrent processing; * make lookup in SADB/SPDB faster; * revise PFKEY implementation, rem