[Top] [All Lists]

Re: ipsec, nat-t, iproute2?

To: bert hubert <ahu@xxxxxxx>
Subject: Re: ipsec, nat-t, iproute2?
From: James Morris <jmorris@xxxxxxxxxx>
Date: Fri, 30 Jul 2004 14:55:19 -0400 (EDT)
Cc: netdev@xxxxxxxxxxx
In-reply-to: <20040730170726.GA5144@xxxxxxxxxxxxxxx>
Sender: netdev-bounce@xxxxxxxxxxx
On Fri, 30 Jul 2004, bert hubert wrote:

> 1) One can configure ipsec over netlink (XFRM_USER), is this the preferred
> interface? Is it documented somehwere, or is there some source which uses
> this interface? Alternatively, is PFKEY considered deprecated?

PF_KEY is not deprecated, it's an IETF standard and required for
compliance & compatibility.  XFRM_USER is simply the native Linux

- James
James Morris

<Prev in Thread] Current Thread [Next in Thread>