The following is an extremely inefficient way to make new SAs visible immediately. It is just for example purposes.
We just flush out all the cached bundles any time we insert a new SA state. Krzysztof, can you at least verify that this makes your problem go away? Thanks. diff --git a/net/xfrm/xfrm_state.c b/net/xfrm/xfrm_state.c index 7cf48aa..25dd8f4 100644 --- a/net/xfrm/xfrm_state.c +++ b/net/xfrm/xfrm_state.c @@ -431,6 +431,9 @@ void xfrm_state_insert(struct xfrm_state spin_lock_bh(&xfrm_state_lock); __xfrm_state_insert(x); spin_unlock_bh(&xfrm_state_lock); + + xfrm_state_gc_flush_bundles = 1; + schedule_work(&xfrm_state_gc_work); } EXPORT_SYMBOL(xfrm_state_insert); - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html