On Wed, Sep 21, 2016 at 05:09:47PM +0200, Harry Schmalzbauer wrote:
>  Bezüglich Glen Barber's Nachricht vom 21.09.2016 16:19 (localtime):
> > Author: gjb
> > Date: Wed Sep 21 14:19:01 2016
> > New Revision: 306103
> > URL: https://svnweb.freebsd.org/changeset/base/306103
> >
> > Log:
> >   Document r291292, if_enc(4) addition.
> >   
> >   Submitted by:     ae
> >   Approved by:      re (implicit)
> >   Sponsored by:     The FreeBSD Foundation
> >
> > Modified:
> >   releng/11.0/release/doc/en_US.ISO8859-1/relnotes/article.xml
> >
> > Modified: releng/11.0/release/doc/en_US.ISO8859-1/relnotes/article.xml
> > ==============================================================================
> > --- releng/11.0/release/doc/en_US.ISO8859-1/relnotes/article.xml    Wed Sep 
> > 21 14:15:15 2016        (r306102)
> > +++ releng/11.0/release/doc/en_US.ISO8859-1/relnotes/article.xml    Wed Sep 
> > 21 14:19:01 2016        (r306103)
> > @@ -1433,6 +1433,12 @@
> >     arch="arm64">Initial <acronym>SMP</acronym> support has been
> >     added to the &os;/&arch.arm64; port.</para>
> >  
> > +      <para revision="291292" contrib="sponsor" sponsor="&yandex;">The
> > +   &man.enc.4; driver has been added, providing an interface
> > +   through which <acronym>IPSEC</acronym> can be used via
> > +   &man.kldload.8; without requiring additional kernel and/or
> > +   userland changes.</para>
> 
> Please correct me if I'm wrong, but if_enc(4) has been present at least
> since 9.x.
> In my opinion (non-native english speaker), the paragraph is misleading.
> if_enc(4) cannot be »used« for IPSec, but proviedes access to
> decapsulated ESP traffic processd in kernel space.
> I would understand this paragraph as if I could construct any kind of
> VPN(IPSec)-tunnel with if_enc(4).
> Mybe it's just me, please jump in experts!
> 

I misread the change, it should say the enc(4) driver can now be loaded
via kldload(8), whereas it was necessary to include in the kernel config
before 11.0 (if I am now properly reading the change correctly).

Glen

Attachment: signature.asc
Description: PGP signature

Reply via email to