> This also allows us to avoid a function call and other tests for the > case of "no IPsec processing required" on connected sockets in > ip_output(). make sure you put the similar change to ip6_output as well. pcb policy cache is used by IPv6 as well. itojun