ktls.4 (fd11270509f26e9ebde11ef7d3c3c34497f29124) ktls.4 (6c34d8ce11cb73e718fc23d85b6fbfab07ee15b4)
1.\" Copyright (c) 2020, Chelsio Inc
2.\" All rights reserved.
3.\"
4.\" Redistribution and use in source and binary forms, with or without
5.\" modification, are permitted provided that the following conditions are met:
6.\"
7.\" 1. Redistributions of source code must retain the above copyright notice,
8.\" this list of conditions and the following disclaimer.

--- 17 unchanged lines hidden (view full) ---

26.\" CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
27.\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
28.\" POSSIBILITY OF SUCH DAMAGE.
29.\"
30.\" * Other names and brands may be claimed as the property of others.
31.\"
32.\" $FreeBSD$
33.\"
1.\" Copyright (c) 2020, Chelsio Inc
2.\" All rights reserved.
3.\"
4.\" Redistribution and use in source and binary forms, with or without
5.\" modification, are permitted provided that the following conditions are met:
6.\"
7.\" 1. Redistributions of source code must retain the above copyright notice,
8.\" this list of conditions and the following disclaimer.

--- 17 unchanged lines hidden (view full) ---

26.\" CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
27.\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
28.\" POSSIBILITY OF SUCH DAMAGE.
29.\"
30.\" * Other names and brands may be claimed as the property of others.
31.\"
32.\" $FreeBSD$
33.\"
34.Dd December 1, 2020
34.Dd February 8, 2021
35.Dt KTLS 4
36.Os
37.Sh NAME
38.Nm ktls
39.Nd kernel Transport Layer Security
40.Sh SYNOPSIS
41.Cd options KERN_TLS
42.Sh DESCRIPTION

--- 189 unchanged lines hidden (view full) ---

232OpenSSL 3.0 and later include support for
233.Nm .
234The
235.Fa devel/openssl
236port may also be built with support for
237.Nm
238by enabling the
239.Dv KTLS
35.Dt KTLS 4
36.Os
37.Sh NAME
38.Nm ktls
39.Nd kernel Transport Layer Security
40.Sh SYNOPSIS
41.Cd options KERN_TLS
42.Sh DESCRIPTION

--- 189 unchanged lines hidden (view full) ---

232OpenSSL 3.0 and later include support for
233.Nm .
234The
235.Fa devel/openssl
236port may also be built with support for
237.Nm
238by enabling the
239.Dv KTLS
240option .
240option.
241OpenSSL in the base system includes KTLS support when built with
242.Dv WITH_OPENSSL_KTLS .
241.Pp
242Applications using a supported library should generally work with
243.Nm
244without any changes provided they use standard interfaces such as
245.Xr SSL_read 3
246and
247.Xr SSL_write 3 .
248Additional performance may be gained by the use of
249.Xr SSL_sendfile 3 .
250.Sh IMPLEMENTATION NOTES
251.Nm
252assumes the presence of a direct map of physical memory when performing
253software encryption and decryption.
254As a result, it is only supported on architectures with a direct map.
255.Sh SEE ALSO
256.Xr cxgbe 4 ,
257.Xr mlx5en 4 ,
258.Xr tcp 4 ,
243.Pp
244Applications using a supported library should generally work with
245.Nm
246without any changes provided they use standard interfaces such as
247.Xr SSL_read 3
248and
249.Xr SSL_write 3 .
250Additional performance may be gained by the use of
251.Xr SSL_sendfile 3 .
252.Sh IMPLEMENTATION NOTES
253.Nm
254assumes the presence of a direct map of physical memory when performing
255software encryption and decryption.
256As a result, it is only supported on architectures with a direct map.
257.Sh SEE ALSO
258.Xr cxgbe 4 ,
259.Xr mlx5en 4 ,
260.Xr tcp 4 ,
261.Xr src.conf 5 ,
259.Xr ifconfig 8 ,
260.Xr sysctl 8 ,
261.Xr crypto 9
262.Sh HISTORY
263Kernel TLS first appeared in
264.Fx 13.0 .
262.Xr ifconfig 8 ,
263.Xr sysctl 8 ,
264.Xr crypto 9
265.Sh HISTORY
266Kernel TLS first appeared in
267.Fx 13.0 .