Enable ESN in fastdp-crypto
This commit is contained in:
1 parent
60323d0960
commit
50985dee90
4 files changed
+8
-5
No files matched your search
@@ -126,7 +126,10 @@ iptables -t filter -A OUTPUT ! -p esp -m policy --dir out --pol none \
|
||||
-m mark --mark ${MARK} -j DROP
|
||||
```
|
||||
|
||||
# Misc
|
||||
## ESN
|
||||
|
||||
To prevent from cycling SeqNo which makes replay attacks possible, we use
|
||||
64-bit extended sequence numbers known as [ESN](esn).
|
||||
|
||||
## MTU
|
||||
|
||||
|
||||
Reference in new issue
Block a user