Re: XFRM and IPv6 raw sockets and multicast

Hi,

On Dec 4, 2007 4:52 PM, YOSHIFUJI Hideaki / 吉藤英明
[off-list ref] wrote:

What do you mean by "ipv6 header"?

  If IPPROTO_RAW is set, we supply the ipv6 header, extensions and payload.

I think hdrincl is broken (and even, say, deprecated) on IPv6.

  By IPv6 you mean the protocol, or Linux's implementation of it?
Although there are APIs that allow applications to build and supply
the extension headers to the network stack, i think the ability to
provide the full ipv6 packet is also useful for some use cases.

If we do really support it, if hdcincl is set, XFRM and other
all extension header processes should be skipped, but they are
not very clear at all so far.

  I understand how some users of IPPROTO_RAW would want xfrm to be
skipped, but on the other hand i also see the interoperation between
the two as useful, to for instance allowing a ESP tunnel to be used by
such packets.

  Hugo