[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: IPSEC

On 25/09/13 13:27, Robert Millan wrote:
> Since we got no response from upstream, I would prefer if IPSEC support
> was archieved by providing a separate kernel flavour. Is that okay with you?

Yes that may be the best option currently.

But I wonder if it would become awkward if features are provided by
flavours.  Someday we could end up with e.g. 3x2x2 different flavours,
or have to offer the choice of one feature but not both together.

There's a similar situation with Xen HVM - the Debian Linux kernels
include full support for Xen PCI devices and paravirtualised device
drivers, but those are not enabled by default in upstream's GENERIC
config, only in a separate XENHVM config.

But IPSEC is unlikely needed in a Xen domU, because IPSEC could be more
effectively handled by the dom0, which has to be trusted anyway.

Regards,
-- 
Steven Chamberlain
steven@pyro.eu.org
Reply to: