[Ipsec-tools-devel] HAVE_PFKEY_POLICY_PRIORITY ???

[VANHULLEBUS Y. <va...@fr...>]

Hi all.

Why and where this flag can be defined when compiling racoon ?

Is it really used somewhere ?


I know that this is at least NOT used on FreeBSD (and I guess on any
KAME based stack), and some insertions takes really lots of time when
the SPD become heavy (more than 1000 entries), without #ifdef
HAVE_PFKEY_POLICY_PRIORITY.


Unless someone can explain me why this is needed, I'll set up some
code in #ifdef HAVE_PFKEY_POLICY_PRIORITY soon, to avoid lots of
useless CPU usage !



Yvan.