Subject: Re: IPv4 fast routing versus IPSEC
To: None <tech-net@netbsd.org>
From: Matt Thomas <matt@3am-software.com>
List: tech-net
Date: 02/23/2003 14:53:52
At 02:46 PM 2/23/2003, Erik E. Fair wrote:
>| date: 1999/10/26 09:53:17;  author: itojun;  state: Exp;  lines: +6 -1
>| disable ipflow (IPv4 fast fowarding) when IPsec is configured into the 
>kernel.
>
>Why is this the case?

My suspicion is that some of the pseudo interfaces (gif, gre, etc.) can't
be called at splnet() properly (which would happen with fast forwarding).


-- 
Matt Thomas               Internet:   matt@3am-software.com
3am Software Foundry      WWW URL:    http://www.3am-software.com/bio/matt/
Cupertino, CA             Disclaimer: I avow all knowledge of this message