← Back to team overview

hipl-core team mailing list archive

Re: One more thing about hipfw-performance


On Tue, 14 Sep 2010 00:25:18 +0200, Mircea Gherzan <mircea.gherzan@xxxxxxxxxxxxxx> wrote:

> - validating esp_prot tokens
> Should packets be forced into userspace when esp_prot is active?
Sadly, yes. It would be great to have a kernel space module for that.

Given a decent spec, I will happily write that module :)

A mostly-kernel implementation was conceived before in [1] but not realized. OTOH that was 5 years ago, maybe it's time to reconsider? Either way, reading this may save you some time even if you're only going to implement esp_prot.

[1] http://hipl.hiit.fi/papers/essi_dippa.pdf