@David_W:
It is probably best seen as an experimental feature, especially until it's been checked into the FreeBSD repository. Hopefully that will happen before the FreeBSD 7.1 release process starts. As I don't follow freebsd-hackers, I'm not sure whether a committer has started working with the author to get this checked in.
Pawel Jakub Dawidek was going to review and commit the code, but his soekris box died. It appears the code is currently in limbo…
UPDATE: The glxsb driver is now in RELENG_7
@plamaiziere:
Yes. The crypto framework does not take care about the performance of the drivers. It selects the driver with the fewest active sessions.
If you have a hifn you should not use the glxsb driver, i think.
That would seem to be a problem with adding the driver to the stock kernel- if you had a VPN1411 in your Alix, using a kernel with glxsb in it could lower your crypto speed. Perhaps an option to load the module that would turn on glxsb_load="YES"