Longer term projects


Hardware crypto support in OpenSSL

IPSec-aware TCP wrappers

Rate limiting within crypto framework

Striping network interface

Process containment
Pushing policy up into the kernel
Allows for policy-based sandboxing