Commit 355e656e authored by Mauro Carvalho Chehab's avatar Mauro Carvalho Chehab Committed by David S. Miller
Browse files

docs: networking: convert ipsec.txt to ReST



Not much to be done here:

- add SPDX header;
- add a document title;
- adjust identation, whitespaces and blank lines;
- add to networking/index.rst.

Signed-off-by: default avatarMauro Carvalho Chehab <mchehab+huawei@kernel.org>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent aac86c88
Loading
Loading
Loading
Loading
+1 −0
Original line number Diff line number Diff line
@@ -68,6 +68,7 @@ Contents:
   ipddp
   ip_dynaddr
   iphase
   ipsec

.. only::  subproject and html

+11 −3
Original line number Diff line number Diff line
.. SPDX-License-Identifier: GPL-2.0

=====
IPsec
=====


Here documents known IPsec corner cases which need to be keep in mind when
deploy various IPsec configuration in real world production environment.

1. IPcomp: Small IP packet won't get compressed at sender, and failed on
1. IPcomp:
	   Small IP packet won't get compressed at sender, and failed on
	   policy check on receiver.

Quote from RFC3173:
Quote from RFC3173::

  2.2. Non-Expansion Policy

   If the total size of a compressed payload and the IPComp header, as