Added by Renato Botelho over 8 years ago. Updated over 7 years ago.
100%
Description
Remove cryptodev from kernel and build it as a module
Updated by Chris Buechler over 8 years ago
Updated by Chris Buechler over 8 years ago
Updated by Renato Botelho almost 8 years ago
IPsec is builtin GENERIC kernel even in FreeBSD and it depends of crypto. This change doesn't make sense anymore
Updated by Renato Botelho almost 8 years ago
reopening since crypto is not cryptodev. Pointy hat to me
Updated by Renato Botelho over 7 years ago
Applied in changeset 69860ee4f5ff9f1e5b87bc6fdcb6dfea66062726.
Updated by Jim Pingle over 7 years ago
I just pushed a GUI change to add it in as a choice next to aesni. Testing revealed no benefit to having both aesni and cryptodev loaded together, so having an option for just one or the other is OK for the time being. It actually lowered performance instead of raising it.
I also added upgrade code so that the cryptodev module would be loaded for users upgrading from previous versions. Since it was in the kernel before, this seemed to be the best POLA-friendly course of action.
Updated by → luckman212 over 7 years ago
Had to look up POLA :)
In case I wasn't the only one:
https://en.m.wikipedia.org/wiki/Principle_of_least_astonishment
Updated by Jim Pingle over 7 years ago
Works as expected. Upgrading users that did not have aesni enabled will have cryptodev loaded on upgrade or with a new install.