hipl-core team mailing list archive

[Christof Mroz <christof.mroz@xxxxxxxxxxxxxx>]

On Tue, 14 Sep 2010 00:25:18 +0200, Mircea Gherzan  
<mircea.gherzan@xxxxxxxxxxxxxx> wrote:

> > > - validating esp_prot tokens
> > > Should packets be forced into userspace when esp_prot is active?
> > >
> > Sadly, yes. It would be great to have a kernel space module for that.
>
> Given a decent spec, I will happily write that module :)

A mostly-kernel implementation was conceived before in [1] but not  
realized. OTOH that was 5 years ago, maybe it's time to reconsider? Either  
way, reading this may save you some time even if you're only going to  
implement esp_prot.

[1] http://hipl.hiit.fi/papers/essi_dippa.pdf