HIPL

  1. Bug #680488
  2. Comment #1

Comment 1 for bug 680488

Revision history for this message
Miika Komu (miika-iki) wrote : Re: packet that initializes handover is dropped

This is a "feature" in the Linux IPsec (see the first bullet):

http://vger.kernel.org/~davem/net_todo.html

Linux IPsec assumes transport layer handles packet retransmissions. IMHO, this is a fair assumption except that it can cause unnecessary delay to e.g. TCP connections, leading to lowered user experience.

So either it should reported to some other bugzilla or the description of this bug should be changed to "hipfw lacks a packet cache mechanism".