Linux IPsec Summit 2018 wishlist

From Libreswan
Revision as of 19:34, 19 January 2018 by Paul Wouters (talk | contribs) (Created page with " A scratchpad for things we'd like to talk about during the ipsec meetup * larval acquire saying "transport mode" - would be nice to not say mode at all <pre> src 192.0.2.1...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

A scratchpad for things we'd like to talk about during the ipsec meetup


  • larval acquire saying "transport mode" - would be nice to not say mode at all
src 192.0.2.100 dst 192.1.2.23
	proto esp spi 0xSPISPIXX reqid REQID mode transport
	replay-window 0 
	sel src 192.0.2.100/32 dst 192.1.2.23/32 proto icmp type 8 code 0 dev eth0 
  • add support for Populate-From-Packet flag. Cause acquires for each different policy hit