> All packets are sent over the same SA, but on different cpus. This means > that the 'rest' might not be in the next ESP message. The other cpu > could have TXed some ESP packets before, it is a race. > > In this example, flow0 is encapsulated on cpu0, flow1 is encapsulated on cpu1, > both on the same SA. > > ESP1 contains flow0, but ESP2 contains flow1. The 'rest' from flow0 is > encapsulated in ESP3, the 'rest' from flow1 is encapsulated in ESP4. > So I think it is not clear how to do a correct reassembling here.
Ah, I see now. It seems to be a real problem and I think that in this case fragmentation must be disabled. And this must be discussed in the draft. Regards, Valery. > Steffen _______________________________________________ IPsec mailing list [email protected] https://www.ietf.org/mailman/listinfo/ipsec
