netfilter vs ipsec vs iproute2

[Alexey Toptygin <alexeyt@xxxxxxxxxxxxx>]

I've more-or-less gleaned from Rusty's guides how netfilter interacts with 
advanced routing and traffic control. Is there any documentation on how 
the new 2.6 ipsec implementation interacts with all of that?

Specifically, where are the policy decisions made? I'm assuming all 'in' 
policies are processed in one place and all 'out' policies are processed 
in one other place. Where are those places WRT routing decisions and 
netfilter hooks?
			Alexey