[Bug 272616] [panic] Reproducible kernel panic related to sendfile and IPSec

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=272616

--- Comment #7 from Konstantin Belousov <kib@FreeBSD.org> ---
(In reply to Mark Johnston from comment #6)
By payload you mean mbuf data, right?
IPSEC needs to match packet IP header against policy to decide should
it do anything with it at all.  Then it needs to select SA based on IP
header, policy, and perhaps system defaults.  All that requires access
to the mbuf data.

After the SA is selected, transformations are applied, which call into OCF.

-- 
You are receiving this mail because:
You are the assignee for the bug.