From: Herbert Xu <herbert@gondor.apana.org.au>
Date: Sun, 28 Mar 2010 21:59:31 +0800
It does make a difference, I think.
When we use IPSEC rules on ports and crazy stuff like that,
we end up with cases such as:
1) We're going over a VPN so RTT, RTTVAR, SSTHRESH, CWND, and other
TCP metrics which are based upon aspects of the path can end up
being wildly different.
2) even the end host can be different in some convoluted
setups
IPSEC encapsulation can effectively change the entire universe in fact
:-) Also, even considering only case #1 above, that's nearly half of
the metrics which we arguably can't move into something like the
inetpeer cache.
This is basically why I've been resistent in the past to these kinds
of ideas to simplify metric handling, as it has the potential to break
something.
The gains of being able to pull this off are still enticing which
is why this topic keeps getting revisited nonetheless :-)
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html