Re: [PATH] IPv6 IPsec support

[Kazunori Miyazawa]

Hello David,

On Wed, 05 Mar 2003 15:25:30 -0800 (PST)
"David S. Miller" <[e-mail]> wrote:

>    From: Kazunori Miyazawa <[e-mail]>
>    Date: Wed, 5 Mar 2003 23:30:25 +0900
> 
> Hello Miyazawa-san,
> 
>    I submit the patch to let the kernel support ipv6 ipsec again.
>    It is able to comple ipv6 as module.
> 
> As promised I applied the patch.  I will push it to Linus later
> this evening, or tomorrow.
> 
> In this initial checkin I made only 2 minor fixes, they
> are attached below:
> 

Thank you very much.

My patch is the first step.
 I think there are these TODOs around IPv6 IPsec as far as I remember.

- Extension Header Processing on inbound:
  As a result of IPv6 IPsec support, Extension Header processing is devided
  into ipv6_parse_exthdrs and ipproto->handler. I think it is better to merge
  other Extension Header handling into ipproto->handler.

- Fragmentation support on outbound:
  We should change ipv6_build_xmit like ip_append_data style to support
  fragmentation with IPsec.

- Removing duplicate codes, clean up and improveing performance.

- Considering relation of IPv6 IPsec and Mobile IPv6. This is future stuff.

Best regards,

--Kazunori Miyazawa (Yokogawa Electric Corporation)