Robert Elz wrote:

> Or in other words, WTF isn't IPSEC enabled in GENERIC already???

In the past, I've heard the argument that there's a (significant?)
impact on network performance if IPSEC is enabled in the kernel config
file, even if ipsec itself isn't used.

I don't have any data to back that up, but it shouldn't be too hard to
prove or bust that myth.  And yes, a Mythbusters episode just finished
here :-)

Simon.
--
Simon Burge                            <simonb@wasabisystems.com>
NetBSD Support and Service:         http://www.wasabisystems.com/