cvs commit: src/sys/netinet ip_fw2.c

[David Malone]

On Sun, May 14, 2006 at 11:42:24PM +0000, Max Laier wrote:
>   Use only lower 64bit of src/dest (and src/dest port) for hashing of IPv6
>   connections and get rid of the flow_id as it is not guaranteed to be stable
>   some (most?) current implementations seem to just zero it out.

I had a look at how constant the IPv6 Flow ID is with Orla McGann about
a year ago:

	http://www.maths.tcd.ie/~dwmalone/p/ec2nd05.pdf

We used to screw up the setting of it on SYN|ACK packets, but we
should do it right now. I think NetBSD had a very similar looking
bug. When I last checked OpenBSD just set it to zero. I think Solaris
DTRT.

	David.