[Bug 296598] inbound ipsec packets get tracked via outer ip header when the tunnel runs over if_wg

[email protected] Thu, 30 Jul 2026 07:24:27 +0000

Newsgroups	gmane.os.freebsd.devel.net
Message-ID	<[email protected]/bugzilla/>

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D296598

Andrey V. Elsukov <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[email protected]

--- Comment #13 from Andrey V. Elsukov <[email protected]> ---
I've been thinking about this problem for a while. It seems all network
consumers do m_pullup() themselves. Only ether_input requires continuous
ethernet header, but when it needs VLAN header it does m_pullup. Then
ip_input() and ip6_input() do not apply any requirements to mbuf, they do
m_pullup for needs size. Firewalls also do the same. Thus, I think we don't
need to do extra m_pullup for next consumers in IPsec code.

--=20
You are receiving this mail because:
You are the assignee for the bug.=