Re: [E1000-devel] How Fedora linux kernel handles ipsec packets

[Kok, A. <auk...@in...>]

Irfan Ahmed wrote:
> Hi,
> 
> I am using kernel 2.6.18 version in fedora linux which has
> built-in support for ipsec. I am interested to know how kernel handles
> ipsec encrypted packets.  I have studied e1000 network driver which I
> am currently using but could not find any code that handles such
> functionalities. 
> 
> Any one has any clue or idea which part of kernel source code handles ipsec encrypted packets in Fedora linux.

ipsec is currently a stack-based implementation - the hardware passes the ipsec 
packets straight to the linux kernel where all the processing takes place. The 
driver (nor the e1000 hardware) does anything with the ipsec packets at all, 
except for handling it over the wire.

check the /net/, /net/xfrm/ and /net/key/ subfolder of a kernel source tree for 
more ipsec code.

Cheers,

Auke