This subsumes some of the content from tcp(4) describing the socket
options but also adds additional notes.
Thanks for doing this John. A couple of typo comments are inline.
Have you thought about how to configure this at boot time?
(I emailed you a little rc.d script. The nfs-over-tls daemons start
via rc.d scripts and need it configured.
What do you think?
(I can put it on phabricator if you'd prefer that?)
spelling of "performed"
"is" doesn't seem to be needed and makes it difficult to read?
I am now thinking that the ktls script is not needed
and is just one more thing to maintain.
/boot/loader.conf for loading modules and /etc/sysctl.conf
for syscyls seems sufficient to me.
I'll leave it up to you.