Re: Add IPSec IP Range in Linux kernel
From: David Miller <davem@davemloft.net>
Date: 2011-11-08 17:15:36
Also in:
linux-crypto, lkml
From: Daniil Stolnikov <redacted> Date: Tue, 08 Nov 2011 12:40:13 +0400
I turned to you, the developers, but rather to urge you to implement this feature using IP range.
This won't be implemented, the keys used for IPSEC rule lookups supported by the kernel are already way too complex. Ranges can be synthesized by userspace, and that's the way it has to be supported.