mirror of
https://github.com/freebsd/freebsd-src.git
synced 2026-10-28 11:25:21 +01:00
Andrew Gallatin
ebea5df751
TLS receive offload is really only beneficial for in-kernel use cases (such as NFS over TLS) or when using a hardware offload. In addition, several recent SAs have involved the TLS receive path, but the only current mitigation for those is to disable TLS offload entirely. Approved by: so Security: FreeBSD-SA-26:67.ktls Reviewed by: ziaee, gallatin, markj Relnotes: yes Sponsored by: Netflix Sponsored by: Chelsio Communications Co-authored-by: John Baldwin <[email protected]> Differential Revision: https://reviews.freebsd.org/D57974 (cherry picked from commit08cda4bcd4) (cherry picked from commitf80f8c38fa)