On Sat, 2016-06-25 at 06:11 +0200, Eric Dumazet wrote: > Simply extend tcp_md5sig_pool to contain a copy of the TCP headers ? > > At most 40 bytes of extra per cpu storage is not a big problem. >
Correction : This is exactly 20 bytes for tcphdr, not 40.