You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Masahide NAKAMURA 157bfc2502 [XFRM]: Restrict upper layer information by bundle. ... On MIPv6 usage, XFRM sub policy is enabled. When main (IPsec) and sub (MIPv6) policy selectors have the same address set but different upper layer information (i.e. protocol number and its ports or type/code), multiple bundle should be created. However, currently we have issue to use the same bundle created for the first time with all flows covered by the case. It is useful for the bundle to have the upper layer information to be restructured correctly if it does not match with the flow. 1. Bundle was created by two policies Selector from another policy is added to xfrm_dst. If the flow does not match the selector, it goes to slow path to restructure new bundle by single policy. 2. Bundle was created by one policy Flow cache is added to xfrm_dst as originated one. If the flow does not match the cache, it goes to slow path to try searching another policy. Signed-off-by: Masahide NAKAMURA <nakam@linux-ipv6.org> Signed-off-by: David S. Miller <davem@davemloft.net>		18 years ago
..
Kconfig	[PFKEYV2]: CONFIG_NET_KEY_MIGRATE option	18 years ago
Makefile	[XFRM]: Extract common hashing code into xfrm_hash.[ch]	19 years ago
xfrm_algo.c	[NET]: Revert sk_buff walker cleanups.	18 years ago
xfrm_hash.c	[XFRM]: Extract common hashing code into xfrm_hash.[ch]	19 years ago
xfrm_hash.h	[XFRM] STATE: Use destination address for src hash.	19 years ago
xfrm_input.c	[SK_BUFF]: Introduce skb_transport_header(skb)	18 years ago
xfrm_policy.c	[XFRM]: Restrict upper layer information by bundle.	18 years ago
xfrm_state.c	[XFRM]: Export SAD info.	18 years ago
xfrm_user.c	[XFRM]: Export SPD info	18 years ago