From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:54789) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1YI9EK-0005xw-8i for qemu-devel@nongnu.org; Mon, 02 Feb 2015 00:07:25 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1YI9EF-000764-9H for qemu-devel@nongnu.org; Mon, 02 Feb 2015 00:07:24 -0500 Received: from shards.monkeyblade.net ([2001:4f8:3:36:211:85ff:fe63:a549]:56787) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1YI9EF-00073O-3I for qemu-devel@nongnu.org; Mon, 02 Feb 2015 00:07:19 -0500 Date: Sun, 01 Feb 2015 21:07:16 -0800 (PST) Message-Id: <20150201.210716.588479604128207372.davem@davemloft.net> From: David Miller In-Reply-To: <1422826183.11044.72.camel@infradead.org> References: <1422797630.11044.32.camel@infradead.org> <20150201.121948.998046471405758397.davem@davemloft.net> <1422826183.11044.72.camel@infradead.org> Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Subject: Re: [Qemu-devel] [PATCH] tun: orphan an skb on tx List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: dwmw2@infradead.org Cc: herbert@gondor.apana.org.au, eric.dumazet@gmail.com, mst@redhat.com, jan.kiszka@siemens.com, linux-kernel@vger.kernel.org, qemu-devel@nongnu.org, netdev@vger.kernel.org From: David Woodhouse Date: Sun, 01 Feb 2015 21:29:43 +0000 > I really was looking for some way to push down something like an XFRM > state into the tun device and just say "shove them out here until I tell > you otherwise". People decided to use TUN and push VPN stuff back into userspace, and there are repercussions for that decision. I'm not saying this to be mean or whatever, but I was very disappointed when userland IPSEC solutions using TUN started showing up. We might as well have not have implemented the IPSEC stack at all, because as a result of the userland VPN stuff our IPSEC stack is largely unused except by a very narrow group of users.