apfs/linux-apfs
0
0
Fork 0
mirror of https://github.com/linux-apfs/linux-apfs.git synced 2026-05-01 15:00:59 -07:00
Code Issues Packages Projects Releases Wiki Activity

[IPV6] XFRM: Fix connected socket to use transformation.

Browse Source 
When XFRM policy and state are ready after TCP connection is started,
the traffic should be transformed immediately, however it does not
on IPv6 TCP.

It depends on a dst cache replacement policy with connected socket.
It seems that the replacement is always done for IPv4, however, on
IPv6 case it is done only when routing cookie is changed.

This patch fix that non-transformation dst can be changed to
transformation one.
This behavior is required by MIPv6 and improves IPv6 IPsec.

Fixes by Masahide NAKAMURA.

Signed-off-by: Noriaki TAKAMIYA <takamiya@po.ntts.co.jp>
Signed-off-by: Masahide NAKAMURA <nakam@linux-ipv6.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
Noriaki TAKAMIYA
2007-09-06 03:31:25 -07:00
committed by David S. Miller
parent e773e4faa1
commit a47ed4cd8c
2 changed files with 41 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
include/net/ip6_fib.h
+4
View File
@@ -105,6 +105,10 @@ struct rt6_info
struct rt6key rt6i_src;
u8 rt6i_protocol;
#ifdef CONFIG_XFRM
u32 rt6i_flow_cache_genid;
#endif
};
static inline struct inet6_dev *ip6_dst_idev(struct dst_entry *dst)