<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">On Jun 16, 2021, at 16:50, Andrew Cagney <andrew.cagney@gmail.com> wrote:<br><div dir="ltr"><blockquote type="cite"><br></blockquote></div><blockquote type="cite"><div dir="ltr"><div dir="ltr"><div dir="ltr"></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, 16 Jun 2021 at 16:03, D. Hugh Redelmeier <<a href="mailto:hugh@mimosa.com">hugh@mimosa.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">I see some functions have been renamed with "policy" replacing "eroute".<br></blockquote><div><br></div><div>shunt_policy(), raw_policy(), enum kernel_policy to be exact.</div></div></div></div></blockquote><div><br></div><div>Part of this is because an eroute is a concept that sort of died with the removal of KLIPS.</div><div>It’s even more unclear to developers at time if it was referring to just SPD policy or also traditional routes.</div><div><br></div><br><blockquote type="cite"><div dir="ltr"><div dir="ltr"><div class="gmail_quote"><div> The trouble with "policy" is that it is used to label way too many things </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
in networking (and the rest of the computer field). It isn't that the <br>
word is inappropriate, but that the word retains no specificity.<br></blockquote><div> <br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
I strongly suggest we not add to this problem.<br></blockquote><div><br></div><div>I think it is better than eroute:</div><div>- I run <<ip xfrm policy>> or <<setkey -DP>> to Dump Policies</div><div>- I can find policy in the RFCs (technically Security Policy Database) and kernel code</div><div>but yes, given connection.policy, it isn't ideal.</div></div></div></div></blockquote><br><div>Yeah, especially because the non-klips kernel codes all use policy for this.</div><div><br></div><div>I think spd policy and connection policy are fairly clearly separated ? Let’s not rename the connection one right now. Maybe later ?</div><div><br></div><div>Paul</div></body></html>