Slashdot Mirror

← Back to Stories (view on slashdot.org)

FreeBSD Gets 'Fast IPsec' Implementation

Posted by michael on from the better,-faster:-pick-any-two dept.

An anonymous reader writes "Sam Leffler (yes, one of the authors of the BSD Design and Implementation book you have on your bookshelf if you know anything with operating systems) has just committed a new FAST_IPSEC implementation to the FreeBSD 5.x source tree. It's a merge of the KAME IPsec implementation and the OpenBSD hardware crypto accelerated IPsec implementation. You can read the commit message here."

3 of 62 comments (clear)

  1. FreeS/WAN and Linux by FattMattP · · Score: 0, Offtopic

    When the hell is FreeS/WAN going to be merged into Linux?

    --
    Prevent email address forgery. Publish SPF records for y
    1. Re:FreeS/WAN and Linux by Secure42 · · Score: 1, Offtopic

      Probably not soon, i think they are avoiding to add it to Linux Kernel to avoid some problems with cryptographic restrictions in some countries. Anyway most distributions include it in their kernels.

    2. Re:FreeS/WAN and Linux by Anonymous Coward · · Score: 0, Offtopic

      According to recent posts on LKML, it's rather unlikely that FreeS/WAN will be merged. Much more likely, it will be something DaveM and Alexy? cook up, borrowing heavily from the USAGI IPV6 implementation. This may even include hooks for hardware acceleration.

      FreeS/WAN's various 'tudes pretty much marginalized them, but, FWIW, at least one of the core team is supportive of the current effort.