Re: [PATCH ipsec] xfrm: BEET mode doesn't support fragments for inner packets

2021-03-25 Thread Steffen Klassert
On Fri, Mar 19, 2021 at 06:27:58PM +0800, Xin Long wrote: > BEET mode replaces the IP(6) Headers with new IP(6) Headers when sending > packets. However, when it's a fragment before the replacement, currently > kernel keeps the fragment flag and replace the address field then encaps > it with ESP. I

[PATCH ipsec] xfrm: BEET mode doesn't support fragments for inner packets

2021-03-19 Thread Xin Long
BEET mode replaces the IP(6) Headers with new IP(6) Headers when sending packets. However, when it's a fragment before the replacement, currently kernel keeps the fragment flag and replace the address field then encaps it with ESP. It would cause in RX side the fragments to get reassembled before d