linux-toradex.git/include/linux/xfrm.h, branch v2.6.19.3

[XFRM]: BEET mode

2006-10-04T07:31:09+00:00

This patch introduces the BEET mode (Bound End-to-End Tunnel) with as
specified by the ietf draft at the following link:

http://www.ietf.org/internet-drafts/draft-nikander-esp-beet-mode-06.txt

The patch provides only single family support (i.e. inner family =
outer family).

Signed-off-by: Diego Beltrami 
Signed-off-by: Miika Komu     
Signed-off-by: Herbert Xu     
Signed-off-by: Abhinav Pathak 
Signed-off-by: Jeff Ahrenholz 
Signed-off-by: David S. Miller

[XFRM]: struct xfrm_usersa_id annotations

2006-09-29T01:02:42+00:00

Signed-off-by: Al Viro 
Signed-off-by: David S. Miller

[XFRM]: struct xfrm_id annotations

2006-09-29T01:02:38+00:00

Signed-off-by: Al Viro 
Signed-off-by: David S. Miller

[XFRM]: xfrm_address_t annotations

2006-09-29T01:02:35+00:00

Signed-off-by: Al Viro 
Signed-off-by: David S. Miller

[XFRM]: ports in struct xfrm_selector annotated

2006-09-29T01:02:33+00:00

Signed-off-by: Al Viro 
Signed-off-by: David S. Miller

[XFRM] POLICY: Support netlink socket interface for sub policy.

2006-09-22T22:08:35+00:00

Sub policy can be used through netlink socket.
PF_KEY uses main only and it is TODO to support sub.

Signed-off-by: Masahide NAKAMURA 
Signed-off-by: YOSHIFUJI Hideaki 
Signed-off-by: David S. Miller

[XFRM] POLICY: sub policy support.

2006-09-22T22:08:34+00:00

Sub policy is introduced. Main and sub policy are applied the same flow.
(Policy that current kernel uses is named as main.)
It is required another transformation policy management to keep IPsec
and Mobile IPv6 lives separate.
Policy which lives shorter time in kernel should be a sub i.e. normally
main is for IPsec and sub is for Mobile IPv6.
(Such usage as two IPsec policies on different database can be used, too.)

Limitation or TODOs:
 - Sub policy is not supported for per socket one (it is always inserted as main).
 - Current kernel makes cached outbound with flowi to skip searching database.
   However this patch makes it disabled only when "two policies are used and
   the first matched one is bypass case" because neither flowi nor bundle
   information knows about transformation template size.

Signed-off-by: Masahide NAKAMURA 
Signed-off-by: YOSHIFUJI Hideaki

[XFRM]: Introduce XFRM_MSG_REPORT.

2006-09-22T22:08:30+00:00

XFRM_MSG_REPORT is a message as notification of state protocol and
selector from kernel to user-space.

Mobile IPv6 will use it when inbound reject is occurred at route
optimization to make user-space know a binding error requirement.

Based on MIPL2 kernel patch.

Signed-off-by: Masahide NAKAMURA 
Signed-off-by: YOSHIFUJI Hideaki 
Signed-off-by: David S. Miller

[XFRM] IPV6: Update outbound state timestamp for each sending.

2006-09-22T22:06:43+00:00

With this patch transformation state is updated last used time
for each sending. Xtime is used for it like other state lifetime
expiration.
Mobile IPv6 enabled nodes will want to know traffic status of each
binding (e.g. judgement to request binding refresh by correspondent node,
or to keep home/care-of nonce alive by mobile node).
The last used timestamp is an important hint about it.
Based on MIPL2 kernel patch.

This patch was also written by: Henrik Petander 

Signed-off-by: Masahide NAKAMURA 
Signed-off-by: YOSHIFUJI Hideaki 
Signed-off-by: David S. Miller

[XFRM] STATE: Introduce care-of address.

2006-09-22T22:06:42+00:00

Care-of address is carried by state as a transformation option like
IPsec encryption/authentication algorithm.

Based on MIPL2 kernel patch.

Signed-off-by: Noriaki TAKAMIYA 
Signed-off-by: Masahide NAKAMURA 
Signed-off-by: YOSHIFUJI Hideaki