When an encrypted packet is decrypted, where does this happen?

3 thoughts on “When an encrypted packet is decrypted, where does this happen?”

1. Inbound Chain is correct

   0: 7f800000 (90a62d60) (ffffffff) IP Options Strip (ipopt_strip)
   1: 7c000000 (90b411b0) (00000001) ClusterXL SDF (cxl_sdf)
   2: 2000000 (9165d390) (00000003) vpn decrypt (vpn)
   3: 1fffff6 (90a63e80) (00000001) Stateless verifications (asm)
   4: 1fffff2 (9167d7b0) (00000003) vpn tagging inbound (tagging)
   5: 1fffff0 (9165cbd0) (00000003) vpn decrypt verify (vpn_ver)
   6: 1000000 (90a95f40) (00000003) SecureXL conn sync (secxl_sync)
   7: 0 (90a0e530) (00000001) fw VM inbound (fw)
   8: 1 (90a6bf20) (00000002) wire VM inbound (wire_vm)

   Reply

2. ans: B. Inbound chain

   Reply

3. ans is inbound chain ?

   [Expert@R8010:0]# fw ctl chain

   in chain (17):

   0: -7ffffff0 (ffffffff8903d8d0) (00000001) tcpt inbound (tcp_tun)

   1: -7f800000 (ffffffff88877f40) (ffffffff) IP Options Strip (in) (ipopt_strip)

   2: – 2000000 (ffffffff89018bb0) (00000003) vpn decrypt (vpn)

   Reply