Module Name:	src
Committed By:	thorpej
Date:		Tue Mar  2 02:17:39 UTC 2004

Modified Files:
	src/sys/netinet6: ipsec.c ipsec.h

Log Message:
Augment the PCB cache with a "hint" that can be used to short-circuit
IPsec processing in other places.  The hint has 3 values: MAYBE, YES,
and NO.  Hints are initialized to MAYBE, and MAYBE is always used for
unconnected sockets (since the spidx may change for every packet
that is output).  For connected sockets, NONE and BYPASS policies cause
the hint to be set to NO, and all other policies to YES.

Also shuffle the PCB cache data structure, turning 3 arrays into a
single array of a struct.


To generate a diff of this commit:
cvs rdiff -r1.93 -r1.94 src/sys/netinet6/ipsec.c
cvs rdiff -r1.41 -r1.42 src/sys/netinet6/ipsec.h

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.