Hello David,
On Wed, 05 Mar 2003 15:25:30 -0800 (PST)
"David S. Miller" <davem@xxxxxxxxxx> wrote:
> From: Kazunori Miyazawa <kazunori@xxxxxxxxxxxx>
> Date: Wed, 5 Mar 2003 23:30:25 +0900
>
> Hello Miyazawa-san,
>
> I submit the patch to let the kernel support ipv6 ipsec again.
> It is able to comple ipv6 as module.
>
> As promised I applied the patch. I will push it to Linus later
> this evening, or tomorrow.
>
> In this initial checkin I made only 2 minor fixes, they
> are attached below:
>
Thank you very much.
My patch is the first step.
I think there are these TODOs around IPv6 IPsec as far as I remember.
- Extension Header Processing on inbound:
As a result of IPv6 IPsec support, Extension Header processing is devided
into ipv6_parse_exthdrs and ipproto->handler. I think it is better to merge
other Extension Header handling into ipproto->handler.
- Fragmentation support on outbound:
We should change ipv6_build_xmit like ip_append_data style to support
fragmentation with IPsec.
- Removing duplicate codes, clean up and improveing performance.
- Considering relation of IPv6 IPsec and Mobile IPv6. This is future stuff.
Best regards,
--Kazunori Miyazawa (Yokogawa Electric Corporation)
|