[Openswan Users] Best linux for openswan?

[Michael Richardson]

-----BEGIN PGP SIGNED MESSAGE-----


>>>>> "Brad" == Brad Chang <openswan at dotnoc.com> writes:
    Brad> how to optimize the os/kernel for a good stable high
    Brad> connection free/openswan installation?

  There really isn't a lot to do that is openswan specific.

  I prefer to build all production kernels statically - it avoids the
upgrade nightmare of /lib/modules and rebooting, etc. On a firewall, you
ought to know what hardware you will have, and don't expect anyone to
add new stuff randomly.
  (So for instance, I never use realtek or ne2000 cards for routers, but
I always build in those drivers, because, I have them by the crateload, and
in a pinch, you can always find one nearby to substitute)

- --
]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson,    Xelerance Corporation, Ottawa, ON    |net architect[
] mcr at xelerance.com      http://www.sandelman.ottawa.on.ca/mcr/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Finger me for keys

iQCVAwUBQFj6/4qHRg3pndX9AQE1hAP+NHW9GyglVXhR37/UFlugQ7zlT+Tgc5jg
OjniXyGS5MJQbPcfuCvDT8S3gc7Rjq5+qGUik0Bj+CpVaWWXA4WW6OsPVf9J3Ypn
YLqvg+zOJHZVkfoFxOUC1CkANJRwEOsCoe0ffAA4CXhhaR75OVK57ITsMWaGmi2L
fsW9s+5BVCY=
=wVMI
-----END PGP SIGNATURE-----