From: Timo_Teräs <redacted>
Date: Thu, 17 Jan 2008 11:38:13 +0200
The af_key issue is that in big dumps you get only first X
entries. The rest of the entries are dropped because the
socket receive buffer goes full. You get data corruption:
missing entries.
This is an inherent aspect of AF_KEY (and what it was
derived from, BSD routing sockets).
It has to provide dumps atomically, and if there is no
space there is no way to provide those entries which
would require more rcvbuf space.