Bug in FAST IPSEC pfkey interaction ...

2007-04-08 Thread Matthew Grooms
All, I have encountered a bug while doing some testing using the ike daemon that is bundled with the client software that I posted recently on this list. The daemon is multi threaded and tends to stress the pfkey interface a bit more than racoon by submitting batches of pfkey messages in

Re: A radical restructuring of IPsec...

2007-04-08 Thread David Duchscher
On Apr 8, 2007, at 9:25 AM, [EMAIL PROTECTED] wrote: At Sat, 7 Apr 2007 12:16:00 +0200, Jeremie Le Hen wrote: Hi, Bruce, On Sat, Apr 07, 2007 at 05:27:30AM +0100, Bruce M. Simpson wrote: I'm all for this in principle. I believe that the case for FAST_IPSEC over KAME IPSEC is fairly clear fo

Re: A radical restructuring of IPsec...

2007-04-08 Thread gnn
At Sat, 7 Apr 2007 12:16:00 +0200, Jeremie Le Hen wrote: > > Hi, Bruce, > > On Sat, Apr 07, 2007 at 05:27:30AM +0100, Bruce M. Simpson wrote: > > I'm all for this in principle. I believe that the case for FAST_IPSEC > > over KAME IPSEC is fairly clear for those of us who have read the USENIX >

Re: A radical restructuring of IPsec...

2007-04-08 Thread Robert Watson
On Sat, 7 Apr 2007, Kris Kennaway wrote: On Fri, Apr 06, 2007 at 04:49:01PM +0200, Ivan Voras wrote: [EMAIL PROTECTED] wrote: The patch removes Kame derived IPsec from the tree, and adds v6 support to FAST_IPSEC. The IPSEC kernel option is removed, but the FAST_IPSEC option remains. This i

Re: Serious bug in most (?) ethernet drivers (bge, bce, ixgb etc.).

2007-04-08 Thread Vladimir Ivanov
Bruce Evans wrote: On Thu, 5 Apr 2007, Vladimir Ivanov wrote: We have reported serious bug with em driver (http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/87418) one year and half ago. It's very funny but most freebsd ethernet drivers cloned this bug I seem. You can see same bug in bce, bge