Added by Renato Botelho over 10 years ago. Updated over 9 years ago.
100%
Description
Remove cryptodev from kernel and build it as a module
IPsec is builtin GENERIC kernel even in FreeBSD and it depends of crypto. This change doesn't make sense anymore
reopening since crypto is not cryptodev. Pointy hat to me
Applied in changeset commit:69860ee4f5ff9f1e5b87bc6fdcb6dfea66062726.
I just pushed a GUI change to add it in as a choice next to aesni. Testing revealed no benefit to having both aesni and cryptodev loaded together, so having an option for just one or the other is OK for the time being. It actually lowered performance instead of raising it.
I also added upgrade code so that the cryptodev module would be loaded for users upgrading from previous versions. Since it was in the kernel before, this seemed to be the best POLA-friendly course of action.
Had to look up POLA :)
In case I wasn't the only one:
https://en.m.wikipedia.org/wiki/Principle_of_least_astonishment
Works as expected. Upgrading users that did not have aesni enabled will have cryptodev loaded on upgrade or with a new install.
Also available in: Atom