Re: [Openswan dev] IPComp

[Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>]

On Tue, Jul 06, 2004 at 10:34:55AM -0400, James Morris wrote:
> 
> It's only called when an SA is initialized.  This should not happen all 
> the time, and if you can't find 64k for such an ooperation you have big 
> problems.

With most KMs the SAs are renegotiated periodically.  So as time
goes on memory fragmentation will eventually cause this to fail.
You also to consider IPsec gateways where there are hundreds or
thousands of SAs.

Maybe we can use a vmalloc instead? That seems to be what the
deflate module does.

Cheers,
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt