Project

General

Profile

Feature #34228

Add IPsec kernel module

Added by Jorgen Sovik over 2 years ago. Updated about 2 years ago.

Status:
Done
Priority:
No priority
Assignee:
Alexander Motin
Category:
OS
Target version:
11.2-BETA2
Estimated time:
Severity:
Low
Reason for Closing:
Reason for Blocked:
Needs QA:
No
Needs Doc:
No
Needs Merging:
No
Needs Automation:
No
Support Suite Ticket:
n/a
Hardware Configuration:

Description

Hi,

I've been thinking of moving to IKEv2 over OpenVPN, but I can't seem to load the ipsec module in my FreeNAS jail.
Isn't ipsec included in the FreeNAS kernel?

Currently running FreeNAS-11.1-U4

Best regards,
Jørgen

Associated revisions

Revision 74a334c3 (diff)
Added by Alexander Motin about 2 years ago

Add IPSEC_SUPPORT to kernel and ipsec as module. Ticket: #34228

Revision cfd884fa (diff)
Added by Alexander Motin about 2 years ago

Add IPSEC_SUPPORT to kernel and ipsec as module. Ticket: #34228 (cherry picked from commit 74a334c30a8c9cb47fc8ad9c312b7ec8cc8d1927)

Revision b7031451 (diff)
Added by Dru Lavigne about 2 years ago

Mention IPsec kernel module. Ticket: #34228

Revision bfb5da7d (diff)
Added by Dru Lavigne about 2 years ago

Mention IPsec kernel module. Ticket: #34228

History

#1 Updated by Dru Lavigne over 2 years ago

  • Assignee changed from Release Council to Alexander Motin

Over to the OS team for consideration.

#2 Updated by Alexander Motin over 2 years ago

  • Status changed from Unscreened to Screened
  • Target version changed from Backlog to Backlog
  • Severity changed from New to Low

There is indeed no IPsec in FreeNAS kernel now. While for quite some time we have intentionally avoided router role for FreeNAS, FreeBSD 11 GENERIC already has IPSEC enabled by default. So it may be a part of updating our kernel config, or at least we could build IPSEC as module now if anybody wish to do something with it.

#3 Updated by Jorgen Sovik over 2 years ago

Alexander Motin wrote:

There is indeed no IPsec in FreeNAS kernel now. While for quite some time we have intentionally avoided router role for FreeNAS, FreeBSD 11 GENERIC already has IPSEC enabled by default. So it may be a part of updating our kernel config, or at least we could build IPSEC as module now if anybody wish to do something with it.

I can understand that about router role, but this is for an IPsec client, instead of the unstable OpenVPN with my provider.
It would be cool if a module could be built.

--
Jørgen

#4 Updated by Alexander Motin over 2 years ago

  • Target version changed from Backlog to Backlog

#5 Updated by Alexander Motin about 2 years ago

  • Status changed from Screened to In Progress
  • Target version changed from Backlog to 11.2-BETA2

#6 Updated by Alexander Motin about 2 years ago

  • Subject changed from FreeNAS-11.1-U4 - IPsec in kernel? to Add IPsec kernel module

#8 Updated by Alexander Motin about 2 years ago

  • Status changed from In Progress to Passed Testing
  • Needs QA changed from Yes to No
  • Needs Merging changed from Yes to No

The ipsec kernel module is built into latest nightly and loads successfully. Jorgen, please try whatever you wanted to do with it.

#9 Updated by Dru Lavigne about 2 years ago

  • Status changed from Passed Testing to Ready for Testing
  • Needs QA changed from No to Yes

#10 Updated by Joe Maloney about 2 years ago

  • Status changed from Ready for Testing to Passed Testing

The module is present, and can be loaded without issues using kldload.

#11 Updated by Jorgen Sovik about 2 years ago

Alexander Motin wrote:

The ipsec kernel module is built into latest nightly and loads successfully. Jorgen, please try whatever you wanted to do with it.

Thanks, working perfectly now!

#12 Updated by Dru Lavigne about 2 years ago

  • Status changed from Passed Testing to Done
  • Needs QA changed from Yes to No
  • Needs Doc changed from Yes to No

Also available in: Atom PDF