docs: networking: convert ipsec.txt to ReST

Not much to be done here:

- add SPDX header;
- add a document title;
- adjust identation, whitespaces and blank lines;
- add to networking/index.rst.

Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
Mauro Carvalho Chehab 2020-04-28 00:01:48 +02:00 committed by David S. Miller
parent aac86c887e
commit 355e656e01
2 changed files with 12 additions and 3 deletions

View File

@ -68,6 +68,7 @@ Contents:
ipddp ipddp
ip_dynaddr ip_dynaddr
iphase iphase
ipsec
.. only:: subproject and html .. only:: subproject and html

View File

@ -1,12 +1,20 @@
.. SPDX-License-Identifier: GPL-2.0
=====
IPsec
=====
Here documents known IPsec corner cases which need to be keep in mind when Here documents known IPsec corner cases which need to be keep in mind when
deploy various IPsec configuration in real world production environment. deploy various IPsec configuration in real world production environment.
1. IPcomp: Small IP packet won't get compressed at sender, and failed on 1. IPcomp:
Small IP packet won't get compressed at sender, and failed on
policy check on receiver. policy check on receiver.
Quote from RFC3173: Quote from RFC3173::
2.2. Non-Expansion Policy
2.2. Non-Expansion Policy
If the total size of a compressed payload and the IPComp header, as If the total size of a compressed payload and the IPComp header, as
defined in section 3, is not smaller than the size of the original defined in section 3, is not smaller than the size of the original