Enable ESN in fastdp-crypto

This commit is contained in:
Martynas Pumputis committed 2017-01-31 17:21:01 +00:00
1 parent 60323d0960
commit 50985dee90
4 files changed
+8 -5

No files matched your search

+4 -1
View File
@@ -126,7 +126,10 @@ iptables -t filter -A OUTPUT ! -p esp -m policy --dir out --pol none \
-m mark --mark ${MARK} -j DROP
```
# Misc
## ESN
To prevent from cycling SeqNo which makes replay attacks possible, we use
64-bit extended sequence numbers known as [ESN](esn).
## MTU