Re: [PATH] IPv6 IPsec support

Hello David,

On Wed, 05 Mar 2003 15:25:30 -0800 (PST)
"David S. Miller" [off-list ref] wrote:

   From: Kazunori Miyazawa [off-list ref]
   Date: Wed, 5 Mar 2003 23:30:25 +0900

Hello Miyazawa-san,

   I submit the patch to let the kernel support ipv6 ipsec again.
   It is able to comple ipv6 as module.

As promised I applied the patch.  I will push it to Linus later
this evening, or tomorrow.

In this initial checkin I made only 2 minor fixes, they
are attached below:

Thank you very much.

My patch is the first step.
 I think there are these TODOs around IPv6 IPsec as far as I remember.

- Extension Header Processing on inbound:
  As a result of IPv6 IPsec support, Extension Header processing is devided
  into ipv6_parse_exthdrs and ipproto->handler. I think it is better to merge
  other Extension Header handling into ipproto->handler.

- Fragmentation support on outbound:
  We should change ipv6_build_xmit like ip_append_data style to support
  fragmentation with IPsec.

- Removing duplicate codes, clean up and improveing performance.

- Considering relation of IPv6 IPsec and Mobile IPv6. This is future stuff.

Best regards,

--Kazunori Miyazawa (Yokogawa Electric Corporation)