-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
>>>>> "Shinta" == Shinta Sugimoto
<shinta sfc.wide.ad.jp> writes:
>> I can see how getsockname()/getpeername() are
not good enough,
>> and you'd like a more sophisticated answer.
This is similar,
>> certainly to what IPsec wants: we want to know
far more than what
>> that interface can provide. (And in the case
IPv4 transport mode
>> through a NAPT, the answer from getpeername()
is perhaps
>> completely ambiguous)
Shinta> I see. BTW, is there any other cases than
NAT where IPsec
Shinta> requires more sophisticated Socket API calls
if peer is
Shinta> multihomed ?
Many people would like to be able to establish multiple
IPsec SAs
between two nodes that are multihomed. I.e. one for each
interface
address. Many would like to load balance between the
tunnels.
(The only situation that I'm aware that have been
deployed is actually
where one load balances between *machines*, with failover
between the
two machines, and it's all about tunnels, so the
end-application never
sees this)
Given shim6, let ULP=ESP, and just use shim6. So, IPsec in
the kernel
may need to know about shim6, but application does not see
shim6, only
IPsec.
- --
] ON HUMILITY: to err is human. To moo, bovine.
| firewalls [
] Michael Richardson, Xelerance Corporation, Ottawa, ON
|net architect[
] mcr xelerance.com http://www.san
delman.ottawa.on.ca/mcr/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel
hacking, security guy"); [
"The Microsoft _Get the Facts CD_ does not work on
Linux." - orospakr
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Finger me for keys
iQEVAwUBRE4kVICLcPvd0N1lAQJ2cggApEL/9B28gJk9s/IiAvvCn8c9yi9q
aaYW
F0J7hd4Blx+bhB5z+DG2gS6O7soXo1ehtqf731Xu9Kcl+ihUAxBx9gUd9j9E
sXy/
OlxXavKAtKEh8N18CqJh6XJFqWr9m7DCBcYiz+GzIzc/0tgRTFBCidYC4PE4
cNrk
oJq9obxmQJgLVm2vWJIaQEDmtjW1CLymO2o6uwxcCTwJLPDR1N2G7+dGbSUH
+d2m
+7xsPcmdRrQmGFJxutpo9/KF/s5lyOn7SDm3XAbhE0B6oUGsBZtAgWvonZ+b
3KGF
/xcy1EQB6sEMt2w8fgYb6YTts4DqVAP63Or7EgT+U1yg8CQIKnQpNA==
=91Gm
-----END PGP SIGNATURE-----
_______________________________________________
|