Subject: Re: ProxyARP and IPSec

From: Thomas Graf <[email-masked]>
Date: Fri, 8 Sep 2006 09:37:03 +0200

* H. Peter Anvin <[email-masked]> 2006-09-07 15:28
> Thomas Graf wrote:
> >What about adding blackhole device to be used for such routes.
> >I believe it would be good architecture to always use devices
> >to state directions packets are being received from and sent to.
> 
> The dummy device can be used for that.

I was thinking a bit beyond that, a device similiar to ifb but
without a hard header to allow classification. Packets get
enqueued before skb->dst gets overwritten with dst->child and
dequeue handles the second half of xfrm4_output_finish2().