forked from luck/tmp_suning_uos_patched
docs: networking: convert ipsec.txt to ReST
Not much to be done here: - add SPDX header; - add a document title; - adjust identation, whitespaces and blank lines; - add to networking/index.rst. Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
parent
aac86c887e
commit
355e656e01
|
@ -68,6 +68,7 @@ Contents:
|
|||
ipddp
|
||||
ip_dynaddr
|
||||
iphase
|
||||
ipsec
|
||||
|
||||
.. only:: subproject and html
|
||||
|
||||
|
|
|
@ -1,12 +1,20 @@
|
|||
.. SPDX-License-Identifier: GPL-2.0
|
||||
|
||||
=====
|
||||
IPsec
|
||||
=====
|
||||
|
||||
|
||||
Here documents known IPsec corner cases which need to be keep in mind when
|
||||
deploy various IPsec configuration in real world production environment.
|
||||
|
||||
1. IPcomp: Small IP packet won't get compressed at sender, and failed on
|
||||
1. IPcomp:
|
||||
Small IP packet won't get compressed at sender, and failed on
|
||||
policy check on receiver.
|
||||
|
||||
Quote from RFC3173:
|
||||
2.2. Non-Expansion Policy
|
||||
Quote from RFC3173::
|
||||
|
||||
2.2. Non-Expansion Policy
|
||||
|
||||
If the total size of a compressed payload and the IPComp header, as
|
||||
defined in section 3, is not smaller than the size of the original
|
Loading…
Reference in New Issue
Block a user