Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 29 Dec 2005 12:25:49 +0000
From:      Brian Candler <B.Candler@pobox.com>
To:        Alexey Popov <llp@iteranet.com>
Cc:        freebsd-net@freebsd.org, VANHULLEBUS Yvan <vanhu_bsd@zeninc.net>
Subject:   Re: IPSEC documentation
Message-ID:  <20051229122549.GA11055@uk.tiscali.com>
In-Reply-To: <43B38747.1060906@iteranet.com>
References:  <20051228143817.GA6898@uk.tiscali.com> <001401c60bc0$a3c87e90$1200a8c0@gsicomp.on.ca> <20051228153106.GA7041@uk.tiscali.com> <20051228164339.GB3875@zen.inc> <43B38747.1060906@iteranet.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Dec 29, 2005 at 09:50:47AM +0300, Alexey Popov wrote:
> If we would also have NAT-T support, FreeBSD would be the best choice 
> of VPN concentrator.

/usr/ports/security/ipsec-tools/pkg-descr says:

"Known issues:
- Non-threaded implementation.  Simultaneous key negotiation performance
  should be improved."

I think that would limit its usefulness as a scalable concentrator, if the
comment is still valid.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20051229122549.GA11055>