| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20231113035219.920136-2-chopps@chopps.org> Date: Sun, 12 Nov 2023 22:52:12 -0500 From: Christian Hopps <chopps@...pps.org> To: devel@...ux-ipsec.org Cc: Steffen Klassert <steffen.klassert@...unet.com>, netdev@...r.kernel.org, Christian Hopps <chopps@...pps.org>, Christian Hopps <chopps@...n.net> Subject: [RFC ipsec-next v2 1/8] iptfs: config: add CONFIG_XFRM_IPTFS From: Christian Hopps <chopps@...n.net> Add new Kconfig option to enable IP-TFS (RFC9347) functionality. Signed-off-by: Christian Hopps <chopps@...n.net> --- net/xfrm/Kconfig | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/net/xfrm/Kconfig b/net/xfrm/Kconfig index 3adf31a83a79..7a41d36bb080 100644 --- a/net/xfrm/Kconfig +++ b/net/xfrm/Kconfig @@ -134,6 +134,22 @@ config NET_KEY_MIGRATE If unsure, say N. +config XFRM_IPTFS + bool "IPsec IP-TFS/AGGFRAG (RFC 9347) encapsulation support" + depends on XFRM + help + Information on the IP-TFS/AGGFRAG encapsulation can be found + in RFC 9347. This feature supports demand driven (i.e., + non-constant send rate) IP-TFS to take advantage of the + AGGFRAG ESP payload encapsulation. This payload type + supports aggregation and fragmentation of the inner IP + packet stream which in turn yields higher small-packet + bandwidth as well as reducing MTU/PMTU issues. Congestion + control is unimplementated as the send rate is demand driven + rather than constant. + + If unsure, say N. + config XFRM_ESPINTCP bool -- 2.42.0
Powered by blists - more mailing lists