Date: Wed, 17 Nov 2004 10:29:49 +0000 (GMT) From: Robert Watson <rwatson@freebsd.org> To: Giuliano Cardozo Medalha <giulianocm@uol.com.br> Cc: freebsd-questions@freebsd.org Subject: Re: MPSAFE - Warning Message-ID: <Pine.NEB.3.96L.1041117102752.59721C-100000@fledge.watson.org> In-Reply-To: <200411160054.39582.giulianocm@uol.com.br>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 16 Nov 2004, Giuliano Cardozo Medalha wrote: > I got some messages for my customized kernel, using IPsec and IPv6: > > WARNING: MPSAFE network stack disabled, expect reduced performance. > > My kernel have the following option: > > options NET_WITH_GIANT > > How is possible to correct this warning The problem here is the KAME IPSEC code, which is not yet able to run without the Giant lock. For those using only IPv4, FAST_IPSEC is an option, as it can run without the Giant lock. Unfortunately, until the KAME IPSEC code is locked down, your system will need to run with Giant. The good news is that it will probably perform well, just not optimally. If you don't notice any specific performance related problems, you can safely ignore the error. BTW, when compiling with KAME IPSEC, debug.mpsafenet=1 will be forced, you don't actually need the NET_WITH_GIANT option; that option basically does the same thing as the statement in the KAME code that says "NET_NEEDS_GIANT"). Robert N M Watson FreeBSD Core Team, TrustedBSD Projects robert@fledge.watson.org Principal Research Scientist, McAfee Research
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.NEB.3.96L.1041117102752.59721C-100000>