Re: [PATCH ipsec-next] xfrm: Allow xfrmi if_id to be updated by UPDSA

2018-07-22 Thread Steffen Klassert
On Thu, Jul 19, 2018 at 07:07:47PM -0700, Nathan Harold wrote: > Allow attaching an SA to an xfrm interface id after > the creation of the SA, so that tasks such as keying > which must be done as the SA is created, can remain > separate from the decision on how to route traffic > from an SA. This p

[PATCH ipsec-next] xfrm: Allow xfrmi if_id to be updated by UPDSA

2018-07-19 Thread Nathan Harold
Allow attaching an SA to an xfrm interface id after the creation of the SA, so that tasks such as keying which must be done as the SA is created, can remain separate from the decision on how to route traffic from an SA. This permits SA creation to be decomposed in to three separate steps: 1) alloca