RE: Protocol and port fields in selectors

["Andrew Krywaniuk" <andrew.krywaniuk@alcatel.com>]

> That is actually the whole idea; to reduce the number of SAs. Since
> we are talking about several hundred thousands of SAs,
> cutting the size
> in half reduces the memory requirements (a lot) and improves
> performance.

This is essentially the argument against port and protocol based SAs in
general. If you just used a firewall rule to block stray packets you
wouldn't have this problem. Trying to reduce the memory footprint after
mandating port-constrained SAs is like optimizing bubble sort.

Andrew
-------------------------------------------
There are no rules, only regulations. Luckily,
history has shown that with time, hard work,
and lots of love, anyone can be a technocrat.