[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: Notes about identifier - locator separator



> > The IPv6 architecture is pretty clear about that one: the only
packets
> > that a router is expected to process are those in which the first
> > payload is a "per hop option", or those in which the destination
address
> > is one of the router's own addresses. All other payloads are
supposedly
> > end-to-end.
> 
> 
> Well there's architecture and reality.  Reality says that devices are
> going to look well inside the header for port information, firewall
> processing, and packet classification, to name a few.

Sure. But Frank originally mentioned VLSI. Hard-coding this kind of
"value added" filters in a VLSI doesn't look like a terribly good idea.
Also, there is the little detail called IPSEC...

-- Christian Huitema