linux-toradex.git/net/ipv4/xfrm4_tunnel.c, branch v3.2.37

net: struct xfrm_tunnel in read_mostly section

2010-08-30T20:50:45+00:00

tunnel4_handlers chain being scanned for each incoming packet,
make sure it doesnt share an often dirtied cache line.

Signed-off-by: Eric Dumazet 
Signed-off-by: David S. Miller

[IPCOMP]: Fix reception of incompressible packets

2008-02-01T03:27:24+00:00

I made a silly typo by entering IPPROTO_IP (== 0) instead of
IPPROTO_IPIP (== 4).  This broke the reception of incompressible
packets.

Signed-off-by: Herbert Xu 
Signed-off-by: David S. Miller

[XFRM]: constify 'struct xfrm_type'

2008-02-01T03:27:20+00:00

Signed-off-by: Eric Dumazet 
Signed-off-by: David S. Miller

[IPSEC]: Move tunnel parsing for IPv4 out of xfrm4_input

2007-10-18T04:28:53+00:00

This patch moves the tunnel parsing for IPv4 out of xfrm4_input and into
xfrm4_tunnel.  This change is in line with what IPv6 does and will allow
us to merge the two input functions.

Signed-off-by: Herbert Xu 
Signed-off-by: David S. Miller

[IPSEC]: Fix pure tunnel modes involving IPv6

2007-10-18T04:28:06+00:00

I noticed that my recent patch broke 6-on-4 pure IPsec tunnels (the ones
that are only used for incompressible IPsec packets).  Subsequent reviews
show that I broke 6-on-6 pure tunnels more than three years ago and nobody
ever noticed. I suppose every must be testing 6-on-6 IPComp with large
pings which are very compressible :)

This patch fixes both cases.

Signed-off-by: Herbert Xu 
Signed-off-by: David S. Miller

[IPSEC]: Move IP protocol setting from transforms into xfrm4_input.c

2007-10-10T23:55:56+00:00

This patch makes the IPv4 x->type->input functions return the next protocol
instead of setting it directly.  This is identical to how we do things in
IPv6 and will help us merge common code on the input path.

Signed-off-by: Herbert Xu 
Signed-off-by: David S. Miller

[IPSEC]: Move IP length/checksum setting out of transforms

2007-10-10T23:55:56+00:00

This patch moves the setting of the IP length and checksum fields out of
the transforms and into the xfrmX_output functions.  This would help future
efforts in merging the transforms themselves.

It also adds an optimisation to ipcomp due to the fact that the transport
offset is guaranteed to be zero.

Signed-off-by: Herbert Xu 
Signed-off-by: David S. Miller

[IPSEC]: Set skb->data to payload in x->mode->output

2007-10-10T23:55:54+00:00

This patch changes the calling convention so that on entry from
x->mode->output and before entry into x->type->output skb->data
will point to the payload instead of the IP header.

This is essentially a redistribution of skb_push/skb_pull calls
with the aim of minimising them on the common path of tunnel +
ESP.

It'll also let us use the same calling convention between IPv4
and IPv6 with the next patch.

Signed-off-by: Herbert Xu 
Signed-off-by: David S. Miller

[XFRM]: Add module alias for transformation type.

2007-07-11T05:15:43+00:00

It is clean-up for XFRM type modules and adds aliases with its
protocol:
 ESP, AH, IPCOMP, IPIP and IPv6 for IPsec
 ROUTING and DSTOPTS for MIPv6

It is almost the same thing as XFRM mode alias, but it is added
new defines XFRM_PROTO_XXX for preprocessing since some protocols
are defined as enum.

Signed-off-by: Masahide NAKAMURA 
Acked-by: Ingo Oeser 
Signed-off-by: David S. Miller

[SK_BUFF]: Introduce ip_hdr(), remove skb->nh.iph

2007-04-26T05:25:10+00:00

Signed-off-by: Arnaldo Carvalho de Melo 
Signed-off-by: David S. Miller