On 04/12/2011 01:23 PM, Paolo Smiraglia wrote:
Hi Michael! Thanks for the reply. Comments are inline.
Hi Paolo, so basically this is about IPSec driver implementation to the libvirt ? Exactly...
Ok, right. I don't know much about IPSec itself so some study on the matter would be necessary to provide some better understanding however from what I know the implementation to the Linux kernel directly is possible for the software stack however implementing this in the virtual hardware stack (emulation) is certainly a good thing since you don't need to patch the kernel at all. The only thing I'm not sure about is the technical point of view since I don't know how hard would the implementation be.
I don't think the idea is bad however I'm not working on libvirt too much so you should ask libvirt guys about they opinion.
Since I think implementing this may be a good idea I'm putting DV to the CC list for his opinion on this matter. Thanks for the "support of the cause". ;-)
No problem since I think the idea is good and therefore I support the idea at least :) Have a great time, Michal -- Michal Novotny <minovotn@redhat.com>, RHCE Virtualization Team (xen userspace), Red Hat