Date: Sun, 01 Feb 2015 12:19:48 -0800 (PST)
Message-Id: <20150201.121948.998046471405758397.davem@davemloft.net>
To: dwmw2@infradead.org
Cc: mst@redhat.com, herbert@gondor.apana.org.au, eric.dumazet@gmail.com,
        jan.kiszka@siemens.com, paul.moore@hp.com, netdev@vger.kernel.org,
        linux-kernel@vger.kernel.org, qemu-devel@nongnu.org
Subject: Re: [PATCH] tun: orphan an skb on tx
From: David Miller <davem@davemloft.net>
In-Reply-To: <1422797630.11044.32.camel@infradead.org>
References: <1422789633.11044.18.camel@infradead.org>
	<20150201122611.GA8883@redhat.com>
	<1422797630.11044.32.camel@infradead.org>
Mime-Version: 1.0
Content-Type: Text/Plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: linux-kernel-owner@vger.kernel.org
Content-Length: 743
Lines: 16

From: David Woodhouse <dwmw2@infradead.org>
Date: Sun, 01 Feb 2015 13:33:50 +0000

> Of course, now I'm looking closely at the path these packets take to
> leave the box, it starts to offend me that they're being passed up to
> userspace just to encrypt them (as DTLS or ESP) and then send them back
> down to the kernel on a UDP socket. The kernel already knows how to
> {en,de}crypt ESP, and do the sequence number checking on incoming
> packets.

It's funny, I thought we had an IPSEC stack....
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/