Module Name: src Committed By: ozaki-r Date: Fri Jul 21 03:08:10 UTC 2017
Modified Files: src/sys/netipsec: ipsec.c ipsec.h ipsec_output.c Log Message: Don't use sp->req->sav when handling NAT-T ESP fragmentation In order to do this we need to look up a sav however an additional look-up degrades performance. A sav is later looked up in ipsec4_process_packet so delay the fragmentation check until then to avoid an extra look-up. To generate a diff of this commit: cvs rdiff -u -r1.107 -r1.108 src/sys/netipsec/ipsec.c cvs rdiff -u -r1.52 -r1.53 src/sys/netipsec/ipsec.h cvs rdiff -u -r1.55 -r1.56 src/sys/netipsec/ipsec_output.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.