sharpetronics/strongswan
1
0
Fork 0
mirror of https://github.com/strongswan/strongswan.git synced 2025-10-03 00:00:24 -04:00
Code Issues Projects Releases Wiki Activity

kernel-ipsec: Add flag to disable sending fragments across AGGFRAG payloads

Browse Source 
We have to set this if the peer indicates that it doesn't support
handling such fragments in the notify.
This commit is contained in:
Tobias Brunner 2025-05-15 09:20:52 +02:00
parent 1afc76dd56
commit 33db7a200f
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/libcharon/kernel/kernel_ipsec.h
View File

@ -113,6 +113,8 @@ struct kernel_ipsec_add_sa_t {
bool copy_ecn;
/** Whether to copy the DSCP header field to/from the outer header */
dscp_copy_t copy_dscp;
/** TRUE if the peer doesn't support receiving fragments in AGGFRAG pkts */
bool iptfs_dont_frag;
/** TRUE if initiator of the exchange creating the SA */
bool initiator;
/** TRUE if this is an inbound SA */