Subject: Re: IPv4 fast routing versus IPSEC
To: None <tech-net@netbsd.org>
From: der Mouse <mouse@Rodents.Montreal.QC.CA>
List: tech-net
Date: 02/23/2003 18:14:45
>>| date: 1999/10/26 09:53:17; author: itojun; state: Exp; lines: +6 -1
>>| disable ipflow (IPv4 fast fowarding) when IPsec is configured into the kernel.
>> Why is this the case?
> My suspicion is that some of the pseudo interfaces (gif, gre, etc.)
> can't be called at splnet() properly (which would happen with fast
> forwarding).
But what's IPsec-specific about that?
/~\ The ASCII der Mouse
\ / Ribbon Campaign
X Against HTML mouse@rodents.montreal.qc.ca
/ \ Email! 7D C8 61 52 5D E7 2D 39 4E F1 31 3E E8 B3 27 4B