On Wed, 2006-06-09 at 08:14 -0400, jamal wrote: > maybe thats what you meant by "slow path"?
Never mind what i said above;-> what is needed to have replay protection is calling the IPSEC fast path. The xfrm state is looked up during the pktgen fast still because flows are created as needed on the fly. You could argue that we need to change the architecture of pktgen so it creates all flows first, but that is a huge change. If i can read your mind correctly (;->)you may be thinking of splitting xfrm_state_find() into two pieces: a slow path lookup which perhaps involves the manager and a fast path which looks up just the SAD? Note, theres still a lot of clunky stuff like policies and templates and flowis etc that i dont need. cheers, jamal - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html
