Re: [PATCH 20/23] [PATCH] [XFRM] POLICY: sub policy support.

2006-08-02 Thread David Miller
From: James Morris <[EMAIL PROTECTED]> Date: Wed, 2 Aug 2006 12:04:31 -0400 (EDT) > Why can't IPSec & MIP transforms be bundled on the same policy? At the first year of netconf, Yoshifuji went into detail as to why the IPSEC and MIP transformations had to live seperately. It's partly a side effe

Re: [PATCH 20/23] [PATCH] [XFRM] POLICY: sub policy support.

2006-08-02 Thread James Morris
On Sat, 29 Jul 2006, Masahide NAKAMURA wrote: > Sub policy is introduced. Main and sub policy are applied the same flow. > (Policy that current kernel uses is named as main.) > It is required another transformation policy management to keep IPsec > and Mobile IPv6 lives separate. > Policy which li

[PATCH 20/23] [PATCH] [XFRM] POLICY: sub policy support.

2006-07-29 Thread Masahide NAKAMURA
Sub policy is introduced. Main and sub policy are applied the same flow. (Policy that current kernel uses is named as main.) It is required another transformation policy management to keep IPsec and Mobile IPv6 lives separate. Policy which lives shorter time in kernel should be a sub i.e. normally