lkml.org 
[lkml]   [2001]   [Jul]   [12]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: IPsec in Kernel??
On Thu, 12 Jul 2001, Nitin Dhingra wrote:

> Is there any possibility that IPsec will be provided in
> the kernel ?

The maintainers won't accept code from anyone in the US for fear that
export regulations may tighten again retroactively, so any merge into the
kernel would require a seperate maintainer either to maintain the fork,
and/or to constantly merge in new changes from the original freeswan
project.

The current in-kernel portion of freeswan doesn't get along well with
advanced routing, and doesn't take advantage of SMP, so I'd be rather
disappointed if it got forked and merged in its current form.

Some things that would be nice:
integration with advanced routing
/proc interface so connections can be added on the fly
module-only option (freeswan's latest snapshots seem to have this)
take advantage of SMP
implement AES
use of kernel crypto patch / openssl for userland rsa stuff
move all non-optional parts of the updown scripts into the ipsec program,
a la openbsd where the shell script portion isn't hundreds of lines for
one tunnel.
no bloat (a 3.5 meg ipsec module doesn't seem very reasonable)


justin

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 12:57    [W:0.040 / U:0.504 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site