Date: Tue, 24 Jan 2006 22:54:45 -0800 From: Julian Elischer <julian@elischer.org> To: Haisang Wu <haisang@gmail.com> Cc: freebsd-net@freebsd.org Subject: Re: Developing New Socket Option on 4.10 Message-ID: <43D720B5.2020803@elischer.org> In-Reply-To: <de1c88480601241904h577433cle1c1faf710c21377@mail.gmail.com> References: <de1c88480601241823l5a382c09i2e296c9f30e95292@mail.gmail.com> <43D6E4E9.7010604@mac.com> <de1c88480601241904h577433cle1c1faf710c21377@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Haisang Wu wrote: >Well, I may have some more socket options in the future for the application >to fill >segments of the 20-byte tag, and the tag may be extended to 40 or 64 bytes, >when >OOB information increases. > >How does IPSEC prepend the new header in tunnelling mode? Thanks. > >Haisang > > you COULD use netgraph to do this.. you would have an ng_iface node hooked to your own node that adds the header which could be hooked to an ng_ether interface as a type filter itself or using ng_etf as the ethertype filter.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?43D720B5.2020803>