Processing Internet Protocol security (IPsec) traffic includes determining
at a first location if a classification parameter is available for the IPsec traffic
that indicates a route for the IPsec traffic and forwarding the IPsec traffic based
on the classification parameter. If a classification parameter is not available,
processing IPsec traffic includes decrypting the IPsec traffic at a second location
if the IPsec traffic is encrypted and determining the classification parameter
for the IPsec traffic at the second location.
