Outbound IPSec Processing
Packets flow from transport layer to network layer
Network layer consults SPD to determine security services
Input to SPD is the selectors
Output of the SPD can be:
- drop the packet
- bypass security
- apply security and returns the pointer to SA if it exists. If SA does not exist, then IKE is invoked to set up SA