[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <4732F1B1.204@trash.net>
Date: Thu, 08 Nov 2007 12:23:29 +0100
From: Patrick McHardy <kaber@...sh.net>
To: Herbert Xu <herbert@...dor.apana.org.au>
CC: "David S. Miller" <davem@...emloft.net>, netdev@...r.kernel.org
Subject: Re: [PATCH 19/24] [IPSEC]: Merge most of the output path
Herbert Xu wrote:
> [IPSEC]: Merge most of the output path
>
> As part of the work on asynchrnous cryptographic operations, we need to
> be able to resume from the spot where they occur. As such, it helps if
> we isolate them to one spot.
>
> This patch moves most of the remaining family-specific processing into
> the common output code.
>
> Signed-off-by: Herbert Xu <herbert@...dor.apana.org.au>
> ---
>
> include/net/dst.h | 1
> @@ -66,6 +67,7 @@ static struct xfrm_state_afinfo xfrm4_state_afinfo = {
> .family = AF_INET,
> .proto = IPPROTO_IPIP,
> .eth_proto = htons(ETH_P_IP),
> + .nf_post_routing = NF_IP_POST_ROUTING,
We have a few places that go though the trouble of selecting the
"correct" hook value for the address family, even though the numerical
values are identical. How about we just get rid of the different
naming and use NF_INET_... for both IPv4 and IPv6?
View attachment "x" of type "text/plain" (90310 bytes)
Powered by blists - more mailing lists