summaryrefslogtreecommitdiffstats
path: root/sys/netinet6/ip6_forward.c
diff options
context:
space:
mode:
authorsam <sam@FreeBSD.org>2002-10-16 02:25:05 +0000
committersam <sam@FreeBSD.org>2002-10-16 02:25:05 +0000
commit0ef6c52bbcc67b0dce67c7ad7a6fc685828a6400 (patch)
treeae7276b550c8f6a3436b1985ff4cb31e8a826d66 /sys/netinet6/ip6_forward.c
parentb12d57e66aba52a8bea632c34b458fa9d734aef7 (diff)
downloadFreeBSD-src-0ef6c52bbcc67b0dce67c7ad7a6fc685828a6400.zip
FreeBSD-src-0ef6c52bbcc67b0dce67c7ad7a6fc685828a6400.tar.gz
Tie new "Fast IPsec" code into the build. This involves the usual
configuration stuff as well as conditional code in the IPv4 and IPv6 areas. Everything is conditional on FAST_IPSEC which is mutually exclusive with IPSEC (KAME IPsec implmentation). As noted previously, don't use FAST_IPSEC with INET6 at the moment. Reviewed by: KAME, rwatson Approved by: silence Supported by: Vernier Networks
Diffstat (limited to 'sys/netinet6/ip6_forward.c')
-rw-r--r--sys/netinet6/ip6_forward.c9
1 files changed, 9 insertions, 0 deletions
diff --git a/sys/netinet6/ip6_forward.c b/sys/netinet6/ip6_forward.c
index 97fa8d6..1e6dde8 100644
--- a/sys/netinet6/ip6_forward.c
+++ b/sys/netinet6/ip6_forward.c
@@ -74,6 +74,13 @@
#include <netkey/key.h>
#endif /* IPSEC */
+#ifdef FAST_IPSEC
+#include <netipsec/ipsec.h>
+#include <netipsec/ipsec6.h>
+#include <netipsec/key.h>
+#define IPSEC
+#endif /* FAST_IPSEC */
+
#include <netinet6/ip6_fw.h>
#include <net/net_osdep.h>
@@ -124,7 +131,9 @@ ip6_forward(m, srcrt)
* before forwarding packet actually.
*/
if (ipsec6_in_reject(m, NULL)) {
+#if !defined(FAST_IPSEC)
ipsec6stat.in_polvio++;
+#endif
m_freem(m);
return;
}
OpenPOWER on IntegriCloud