On Tue, 14 Sep 2010 00:25:18 +0200, Mircea Gherzan
<[email protected]> wrote:
> - validating esp_prot tokens
> Should packets be forced into userspace when esp_prot is active?
>
Sadly, yes. It would be great to have a kernel space module for that.
Given a decent spec, I will happily write that module :)
A mostly-kernel implementation was conceived before in [1] but not
realized. OTOH that was 5 years ago, maybe it's time to reconsider? Either
way, reading this may save you some time even if you're only going to
implement esp_prot.
[1] http://hipl.hiit.fi/papers/essi_dippa.pdf
_______________________________________________
Mailing list: https://launchpad.net/~hipl-core
Post to : [email protected]
Unsubscribe : https://launchpad.net/~hipl-core
More help : https://help.launchpad.net/ListHelp