]> git.baikalelectronics.ru Git - kernel.git/commit
[IPV6] XFRM: Fix connected socket to use transformation.
authorNoriaki TAKAMIYA <takamiya@po.ntts.co.jp>
Thu, 6 Sep 2007 10:31:25 +0000 (03:31 -0700)
committerDavid S. Miller <davem@sunset.davemloft.net>
Wed, 10 Oct 2007 23:48:32 +0000 (16:48 -0700)
commit76234fe02ddd041c8bc11ed86bfafde25744a3b9
tree6b79a4b94602bbc0e27df9a6a869253438833f74
parentef9e6b6e62eb5344edbbf24ad90ea0efd7c9d41e
[IPV6] XFRM: Fix connected socket to use transformation.

When XFRM policy and state are ready after TCP connection is started,
the traffic should be transformed immediately, however it does not
on IPv6 TCP.

It depends on a dst cache replacement policy with connected socket.
It seems that the replacement is always done for IPv4, however, on
IPv6 case it is done only when routing cookie is changed.

This patch fix that non-transformation dst can be changed to
transformation one.
This behavior is required by MIPv6 and improves IPv6 IPsec.

Fixes by Masahide NAKAMURA.

Signed-off-by: Noriaki TAKAMIYA <takamiya@po.ntts.co.jp>
Signed-off-by: Masahide NAKAMURA <nakam@linux-ipv6.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/net/ip6_fib.h
net/ipv6/inet6_connection_sock.c