Allow the dummynet module to be loaded without ipfw, as a first step
towards making pf use it for packet scheduling.
MFC after: 2 weeks
Sponsored by: Rubicon Communications, LLC ("Netgate")
kp on Sep 10 2021, 4:24 PM.Authored by
Yes, that's a concern. Especially for merging it back to stable/13 and stable/12.
With default to deny it might be not exactly the desired outcome. Do you think that a separate module w/ dummynet-for-pf (for 12/13) is too much of a hassle? Especially given ae@‘s plan to change dummynet for ipfw?
That's an interesting idea. I'll give that a try. That may turn out to be the easiest fix.
I'm hoping that we can move pf along to the new dummynet code at the same time as ipfw. Happily the interface between firewall and dummynet is pretty simple, so I don't really expect that to be a lot of work.
It introduced 'pfdummynet.ko', which depends on pf like dummynet.ko depends on ipfw. That's intended for stable/13 and stable/12. I'd do this for main, but not MFC it.