Re: Introduce ipsec_sysctl()

2017-11-13 Thread Alexander Bluhm
On Mon, Nov 13, 2017 at 01:30:43PM +0100, Martin Pieuchot wrote: > This move all IPsec tunables to netinet/ipsec_input.c without breaking > the "net.inet.ip" sysctl(3) namespace. > > The reason for this move is to properly separate IPsec and IP globals > in order to ease the removal of the NET_

Introduce ipsec_sysctl()

2017-11-13 Thread Martin Pieuchot
This move all IPsec tunables to netinet/ipsec_input.c without breaking the "net.inet.ip" sysctl(3) namespace. The reason for this move is to properly separate IPsec and IP globals in order to ease the removal of the NET_LOCK() in these layers. ok? Index: netinet/in.h =