Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 12 Dec 1999 04:05:32 +0900
From:      Yoshinobu Inoue <shin@nd.net.fujitsu.co.jp>
To:        freebsd-arch@freebsd.org, cvs-committers@freebsd.org
Subject:   [Solicite review for KAME 5th patch]
Message-ID:  <19991212040532I.shin@nd.net.fujitsu.co.jp>

next in thread | raw e-mail | index | archive | help
People should be busy, but this is 5th KAME patches.
Please give me any comments if someone have time to check it.

http://paradise.kame.net/v6proxy/diana2/shin/work/freebsd/kernel-ipsec.19991212

This is IPsec related kernel extensions and IPv6 Firewall addition.

There are several points,

-ip_output() part ipsec extension is not yet, because KAME
 ipsec uses m_pkthdr.rcvif, and ipfw also use it.
 I am investigating how they can smoothly coexist.

-IPv6 multicast routing and tcp for ipv6 is not yet.

-ipprotosw.h is added to change pr_input() routines prototype
 under sys/netinet. The change is necessary to treat chained
 protocol headers which easily happens when IPsec is introduced.
 An alternative is to change sys/sys/protosw.h, but then other
 protocol stacks' pr_input() routines are also need to be changed.

-sys/netkey files are almost completely replaced as pfkey version2 support.
 But filenames are same so their diffs are complicated.
 Also, src/usr.sbin/keyadmin will become not compilable as the change.


And if not much comments for KAME 4th patches I'll commit it.
It is extensions to libc, but it only includes newly added
IPv6 specific files

Yoshinobu Inoue




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-arch" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19991212040532I.shin>