AAScratch: Difference between revisions

From Libreswan
Jump to navigation Jump to search
No edit summary
No edit summary
Line 25: Line 25:


* 2015 [https://lwn.net/Articles/647516/ LWN virtio]
* 2015 [https://lwn.net/Articles/647516/ LWN virtio]
== Linux Kernel space developments ==
* XFRM Offload : starting 4.14
  * NAT support ???
  * What if the interface is a bridge? can libreswan/strongswan configure SA correctly? [https://wiki.strongswan.org/issues/3454 bridge]
  * what if the packets arrive on different interface would that get decrypted correctly?
 
* XFRM and XDP
  * idea presentation [http://vger.kernel.org/netconf2019_files/xfrm_xdp.pdf Steffen Klassert] Linux Netconf, Boston, June, 2019


== VPP + DPDK IPsec (Userspace stack) ==
== VPP + DPDK IPsec (Userspace stack) ==

Revision as of 11:55, 7 June 2020

Antony's unsorted pages I want access quickly, related to libreswan, when think I know this page exist where is it. Someone moved it renamed ..

virtiofs replace 9pfs: libvirt 6.2, qemu 5.0, kernel 5.4

KVM/QEMU + vsock to replace 9pfs

KVM support for vsock and nfs support could have a better performance than 9pfs. This work could be interesting to libreswan KVM testing. It started in 2015. Slowly picking up, as 2018 it seems AWS and firecracker is pushing it. We are almost there.

Linux Kernel space developments

  • XFRM Offload : starting 4.14
 * NAT support ??? 
 * What if the interface is a bridge? can libreswan/strongswan configure SA correctly? bridge
 * what if the packets arrive on different interface would that get decrypted correctly?
  • XFRM and XDP
 * idea presentation Steffen Klassert Linux Netconf, Boston, June, 2019

VPP + DPDK IPsec (Userspace stack)

iptable rule to drop IKEv2 message id X

https://unix.stackexchange.com/questions/321252/drop-a-packet-depending-on-its-options-or-type

Retrieved from "https://libreswan.org/wiki/index.php?title=AAScratch&oldid=21905"