As of about 2 weeks ago the IPsec implementations in FreeBSD were changed such that the old, Kame, IPsec is no longer in the system, and the system that was once called FAST_IPSEC is now the official IPsec of FreeBSD.
What does this mean to you?
- FreeBSD IPsec is now MP Safe, which is a requirement for the 7.0 release.
- FreeBSD IPsec supports offloading cryptographic operations to specialized hardware by default.
- It’s time to jump in and help test these changes!
So, now it’s time for everyone to get the latest cut of HEAD and try this code out in a wider distribution.