You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

David S. Miller 14e50e57ae [XFRM]: Allow packet drops during larval state resolution. ... The current IPSEC rule resolution behavior we have does not work for a lot of people, even though technically it's an improvement from the -EAGAIN buisness we had before. Right now we'll block until the key manager resolves the route. That works for simple cases, but many folks would rather packets get silently dropped until the key manager resolves the IPSEC rules. We can't tell these folks to "set the socket non-blocking" because they don't have control over the non-block setting of things like the sockets used to resolve DNS deep inside of the resolver libraries in libc. With that in mind I coded up the patch below with some help from Herbert Xu which provides packet-drop behavior during larval state resolution, controllable via sysctl and off by default. This lays the framework to either: 1) Make this default at some point or... 2) Move this logic into xfrm{4,6}_policy.c and implement the ARP-like resolution queue we've all been dreaming of. The idea would be to queue packets to the policy, then once the larval state is resolved by the key manager we re-resolve the route and push the packets out. The packets would timeout if the rule didn't get resolved in a certain amount of time. Signed-off-by: David S. Miller <davem@davemloft.net>		18 years ago
..
802	[NET]: cleanup extra semicolons	18 years ago
8021q	[NET]: Rework dev_base via list_head (v3)	18 years ago
appletalk	header cleaning: don't include smp_lock.h when not used	18 years ago
atm	[NET]: SPIN_LOCK_UNLOCKED cleanup in drivers/atm, net	18 years ago
ax25	[S390] Kconfig: unwanted menus for s390.	18 years ago
bluetooth	[Bluetooth] Fix L2CAP configuration parameter handling	18 years ago
bridge	header cleaning: don't include smp_lock.h when not used	18 years ago
core	[XFRM]: Allow packet drops during larval state resolution.	18 years ago
dccp	[XFRM]: Allow packet drops during larval state resolution.	18 years ago
decnet	Fix occurrences of "the the "	18 years ago
econet	[SK_BUFF]: Convert skb->tail to sk_buff_data_t	18 years ago
ethernet	[SK_BUFF]: Introduce skb_reset_mac_header(skb)	18 years ago
ieee80211	[PATCH] ieee80211: include frequency in scan results	18 years ago
ipv4	[XFRM]: Allow packet drops during larval state resolution.	18 years ago
ipv6	[XFRM]: Allow packet drops during larval state resolution.	18 years ago
ipx	Fix incorrect prototype for ipxrtr_route_packet()	18 years ago
irda	[S390] Kconfig: unwanted menus for s390.	18 years ago
iucv	Add suspend-related notifications for CPU hotplug	18 years ago
key	[IPSEC] pfkey: Load specific algorithm in pfkey_add rather than all	18 years ago
lapb	[PATCH] remove many unneeded #includes of sched.h	18 years ago
llc	Fix occurrences of "the the "	18 years ago
mac80211	[MAC80211]: include <linux/delay.h> instead of <asm/delay.h>	18 years ago
netfilter	[NETFILTER]: nf_conntrack_h323: add missing T.120 address in OLCA	18 years ago
netlabel	SELinux: extract the NetLabel SELinux support from the security server	18 years ago
netlink	header cleaning: don't include smp_lock.h when not used	18 years ago
netrom	[NET]: Rework dev_base via list_head (v3)	18 years ago
packet	[AF_PACKET]: Add option to return orig_dev to userspace.	18 years ago
rfkill	[RFKILL]: Fix check for correct rfkill allocation	18 years ago
rose	[NET]: Rework dev_base via list_head (v3)	18 years ago
rxrpc	[AF_RXRPC]: Make call state names available if CONFIG_PROC_FS=n	18 years ago
sched	[NET_SCHED]: sch_htb: fix event cache time calculation	18 years ago
sctp	[SCTP]: Use menuconfig objects.	18 years ago
sunrpc	Merge branch 'master' of /home/trondmy/repositories/git/linux-2.6/	18 years ago
tipc	[TIPC]: Fixed erroneous introduction of for_each_netdev	18 years ago
unix	header cleaning: don't include smp_lock.h when not used	18 years ago
wanrouter	[SK_BUFF]: Introduce skb_copy_to_linear_data{_offset}	18 years ago
wireless	[WIRELESS] cfg80211: Clarify locking comment.	18 years ago
x25	header cleaning: don't include smp_lock.h when not used	18 years ago
xfrm	[XFRM]: Allow packet drops during larval state resolution.	18 years ago
Kconfig	[S390] Kconfig: no wireless on s390.	18 years ago
Makefile	[NET]: rfkill: add support for input key to control wireless radio	18 years ago
TUNABLE	…
compat.c	[NET]: Adding SO_TIMESTAMPNS / SCM_TIMESTAMPNS support	18 years ago
nonet.c	…
socket.c	Remove SLAB_CTOR_CONSTRUCTOR	18 years ago
sysctl_net.c	…