Re: svn commit: r347402 - head/sys/modules/ipsec

2019-05-10 Thread Kyle Evans
On Fri, May 10, 2019 at 2:46 AM Andrey V. Elsukov  wrote:
>
> On 09.05.2019 22:13, Kyle Evans wrote:
> >> there is two IPsec related interfaces that have problem with automatic
> >> loading - if_enc and if_ipsec. So, if you add both to the mapping list,
> >> this will be useful. CAM enc driver has conflicting name and prevents to
> >> automatic loading of if_enc(4). It is probably always build in the
> >> kernel, but renaming it into "ses" may break some third-party device
> >> drivers.
> >>
> >
> > I think you want something like [0] to add both of these to the map
> > and stop ifconfig(8) from bailing on loading if_enc because 'enc' is
> > loaded. This is safe at least for the set of modules currently mapped.
> >
> > Thanks,
> >
> > Kyle Evans
> >
> > [0] https://people.freebsd.org/~kevans/ipsec.diff
>
> It looks good to me.
>
> --
> WBR, Andrey V. Elsukov
>

Committed as r347429 -- any objection to reverting this link created
in r347402 now?

Thanks!

Kyle Evans
___
svn-src-head@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/svn-src-head
To unsubscribe, send any mail to "svn-src-head-unsubscr...@freebsd.org"


Re: svn commit: r347402 - head/sys/modules/ipsec

2019-05-10 Thread Andrey V. Elsukov
On 09.05.2019 22:13, Kyle Evans wrote:
>> there is two IPsec related interfaces that have problem with automatic
>> loading - if_enc and if_ipsec. So, if you add both to the mapping list,
>> this will be useful. CAM enc driver has conflicting name and prevents to
>> automatic loading of if_enc(4). It is probably always build in the
>> kernel, but renaming it into "ses" may break some third-party device
>> drivers.
>>
> 
> I think you want something like [0] to add both of these to the map
> and stop ifconfig(8) from bailing on loading if_enc because 'enc' is
> loaded. This is safe at least for the set of modules currently mapped.
> 
> Thanks,
> 
> Kyle Evans
> 
> [0] https://people.freebsd.org/~kevans/ipsec.diff

It looks good to me.

-- 
WBR, Andrey V. Elsukov



signature.asc
Description: OpenPGP digital signature


Re: svn commit: r347402 - head/sys/modules/ipsec

2019-05-09 Thread Kyle Evans
On Thu, May 9, 2019 at 1:43 PM Andrey V. Elsukov  wrote:
>
> On 09.05.2019 21:36, Kyle Evans wrote:
> > Any chance the mechanism I introduced for ifconfig mapping ifname <->
> > kld in r347241 would solve the same set of problems this would?
> > (unsure if there are any non-ifconfig(8) problems in consideration) If
> > we have more consumers of it than just vmnet (from a stable/ point of
> > view) then I'd be more than happy to MFC that separately from the rest
> > of the commit.
> >
>
> Hi,
>
> there is two IPsec related interfaces that have problem with automatic
> loading - if_enc and if_ipsec. So, if you add both to the mapping list,
> this will be useful. CAM enc driver has conflicting name and prevents to
> automatic loading of if_enc(4). It is probably always build in the
> kernel, but renaming it into "ses" may break some third-party device
> drivers.
>

I think you want something like [0] to add both of these to the map
and stop ifconfig(8) from bailing on loading if_enc because 'enc' is
loaded. This is safe at least for the set of modules currently mapped.

Thanks,

Kyle Evans

[0] https://people.freebsd.org/~kevans/ipsec.diff
___
svn-src-head@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/svn-src-head
To unsubscribe, send any mail to "svn-src-head-unsubscr...@freebsd.org"


Re: svn commit: r347402 - head/sys/modules/ipsec

2019-05-09 Thread Andrey V. Elsukov
On 09.05.2019 21:36, Kyle Evans wrote:
> Any chance the mechanism I introduced for ifconfig mapping ifname <->
> kld in r347241 would solve the same set of problems this would?
> (unsure if there are any non-ifconfig(8) problems in consideration) If
> we have more consumers of it than just vmnet (from a stable/ point of
> view) then I'd be more than happy to MFC that separately from the rest
> of the commit.
> 

Hi,

there is two IPsec related interfaces that have problem with automatic
loading - if_enc and if_ipsec. So, if you add both to the mapping list,
this will be useful. CAM enc driver has conflicting name and prevents to
automatic loading of if_enc(4). It is probably always build in the
kernel, but renaming it into "ses" may break some third-party device
drivers.

-- 
WBR, Andrey V. Elsukov



signature.asc
Description: OpenPGP digital signature


Re: svn commit: r347402 - head/sys/modules/ipsec

2019-05-09 Thread Kyle Evans
On Thu, May 9, 2019 at 1:06 PM Andrey V. Elsukov  wrote:
>
> Author: ae
> Date: Thu May  9 18:06:11 2019
> New Revision: 347402
> URL: https://svnweb.freebsd.org/changeset/base/347402
>
> Log:
>   Add if_ipsec.ko symlink to ipsec.ko kernel module.
>
>   This add ability to automatically load ipsec kernel module, when
>   if_ipsec(4) virtual interface is created using ifconfig(8).
>
>   Reviewed by:  gallatin
>   MFC after:1 week
>   Differential Revision:https://reviews.freebsd.org/D20169
>

Hi,

Any chance the mechanism I introduced for ifconfig mapping ifname <->
kld in r347241 would solve the same set of problems this would?
(unsure if there are any non-ifconfig(8) problems in consideration) If
we have more consumers of it than just vmnet (from a stable/ point of
view) then I'd be more than happy to MFC that separately from the rest
of the commit.

Thanks,

Kyle Evans
___
svn-src-head@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/svn-src-head
To unsubscribe, send any mail to "svn-src-head-unsubscr...@freebsd.org"


svn commit: r347402 - head/sys/modules/ipsec

2019-05-09 Thread Andrey V. Elsukov
Author: ae
Date: Thu May  9 18:06:11 2019
New Revision: 347402
URL: https://svnweb.freebsd.org/changeset/base/347402

Log:
  Add if_ipsec.ko symlink to ipsec.ko kernel module.
  
  This add ability to automatically load ipsec kernel module, when
  if_ipsec(4) virtual interface is created using ifconfig(8).
  
  Reviewed by:  gallatin
  MFC after:1 week
  Differential Revision:https://reviews.freebsd.org/D20169

Modified:
  head/sys/modules/ipsec/Makefile

Modified: head/sys/modules/ipsec/Makefile
==
--- head/sys/modules/ipsec/Makefile Thu May  9 17:57:04 2019
(r347401)
+++ head/sys/modules/ipsec/Makefile Thu May  9 18:06:11 2019
(r347402)
@@ -7,6 +7,7 @@ SRCS=   if_ipsec.c ipsec.c ipsec_input.c ipsec_mbuf.c ip
ipsec_output.c xform_ah.c xform_esp.c xform_ipcomp.c \
opt_inet.h opt_inet6.h opt_ipsec.h opt_sctp.h 
 SRCS.INET= udpencap.c
+SYMLINKS=  ${KMOD}.ko ${KMODDIR}/if_${KMOD}.ko
 
 opt_ipsec.h:
@echo "#define IPSEC_SUPPORT 1" > ${.TARGET}
___
svn-src-head@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/svn-src-head
To unsubscribe, send any mail to "svn-src-head-unsubscr...@freebsd.org"