lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-ID: <CAFbuYbnotgZxbu2gKJpCdPP-efbK0pi+ZcLs6j8it3Voeoh=Tw@mail.gmail.com> Date: Wed, 27 Aug 2014 12:07:22 +0530 From: Chintu Aggarwal <chintuofkpt@...il.com> To: netdev@...r.kernel.org Subject: linux xfrm question Hi I wanted to add multiple SAs but only one SPD. SPD has remote address as wildcard but proper local address. SAs have both proper local and remote address. Local address in all SAs and SPD is same. As IPsec has to be applied for all packets, I wanted to avoid SPD setup and lookup time. When I use it this way, it seems that xfrm code adds bundles to the same SPD which is a linear search. Is there a hash implementation available for the same, or some other way to improve search time here? Thanks Chintu -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists