Feature #34228
Add IPsec kernel module
Description
Hi,
I've been thinking of moving to IKEv2 over OpenVPN, but I can't seem to load the ipsec module in my FreeNAS jail.
Isn't ipsec included in the FreeNAS kernel?
Currently running FreeNAS-11.1-U4
Best regards,
Jørgen
Associated revisions
History
#1
Updated by Dru Lavigne almost 3 years ago
- Assignee changed from Release Council to Alexander Motin
Over to the OS team for consideration.
#2
Updated by Alexander Motin almost 3 years ago
- Status changed from Unscreened to Screened
- Target version changed from Backlog to Backlog
- Severity changed from New to Low
There is indeed no IPsec in FreeNAS kernel now. While for quite some time we have intentionally avoided router role for FreeNAS, FreeBSD 11 GENERIC already has IPSEC enabled by default. So it may be a part of updating our kernel config, or at least we could build IPSEC as module now if anybody wish to do something with it.
#3
Updated by Jorgen Sovik almost 3 years ago
Alexander Motin wrote:
There is indeed no IPsec in FreeNAS kernel now. While for quite some time we have intentionally avoided router role for FreeNAS, FreeBSD 11 GENERIC already has IPSEC enabled by default. So it may be a part of updating our kernel config, or at least we could build IPSEC as module now if anybody wish to do something with it.
I can understand that about router role, but this is for an IPsec client, instead of the unstable OpenVPN with my provider.
It would be cool if a module could be built.
--
Jørgen
#4
Updated by Alexander Motin almost 3 years ago
- Target version changed from Backlog to Backlog
#5
Updated by Alexander Motin almost 3 years ago
- Status changed from Screened to In Progress
- Target version changed from Backlog to 11.2-BETA2
#6
Updated by Alexander Motin almost 3 years ago
- Subject changed from FreeNAS-11.1-U4 - IPsec in kernel? to Add IPsec kernel module
#7
Updated by Dru Lavigne almost 3 years ago
#8
Updated by Alexander Motin almost 3 years ago
- Status changed from In Progress to Passed Testing
- Needs QA changed from Yes to No
- Needs Merging changed from Yes to No
The ipsec kernel module is built into latest nightly and loads successfully. Jorgen, please try whatever you wanted to do with it.
#9
Updated by Dru Lavigne over 2 years ago
- Status changed from Passed Testing to Ready for Testing
- Needs QA changed from No to Yes
#10
Updated by Joe Maloney over 2 years ago
- Status changed from Ready for Testing to Passed Testing
The module is present, and can be loaded without issues using kldload.
#11
Updated by Jorgen Sovik over 2 years ago
Alexander Motin wrote:
The ipsec kernel module is built into latest nightly and loads successfully. Jorgen, please try whatever you wanted to do with it.
Thanks, working perfectly now!
#12
Updated by Dru Lavigne over 2 years ago
- Status changed from Passed Testing to Done
- Needs QA changed from Yes to No
- Needs Doc changed from Yes to No