On Jan 1, 2012, at 12:39 AM, Florian Weimer wrote:

> * Michael Tuexen:
> 
>> I don't know. But you need a socket per peer and might use select()
>> for multiplexing which might also introduce some limits.
> 
> Do you really need one socket per peer?  Why?
The implementation of DTLS is derived from the TLS implementation. There
you have a TCP socket per peer. For UDP, connected UDP socket are used.
Have a look at the examples at
http://sctp.fh-muenster.de/dtls-samples.html
So the demultiplexing of incoming UDP packets is done by the kernel.
If you want a single socket, you need either:
* Change the implementation to have a 1-to-many relation between
  SSL objects and a BIO.
* Do the demultiplexing with BIOs and copy the messages around.

Best regards
Michael
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> Development Mailing List                       [email protected]
> Automated List Manager                           [email protected]
> 

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to