Code Review / vpp.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: a4f994f) | patch
vpp-swan: allow SAs to be used to the route-based IPsec 05/38005/2
authorAtzm Watanabe <atzmism@gmail.com>
Wed, 25 Jan 2023 05:11:10 +0000 (14:11 +0900)
committerDave Wallace <dwallacelf@gmail.com>
Fri, 3 Feb 2023 14:24:51 +0000 (14:24 +0000)
commitfc2d95d115ea5e82bc3efb18cf40632449112fdf
treee44f020e08ab43336a430dfb916af94cfa926305tree | snapshot
parenta4f994f31e566cc5e6512d3aebf627a6e3ce2cc7commit | diff
vpp-swan: allow SAs to be used to the route-based IPsec

This patch adds a "charon.plugins.kernel-vpp.use_tunnel_mode_sa"
key into strongswan.conf.  If this is turned off, SAs will be
installed without tunnel information and can be used to
"ipsec tunnel protect".  For the route-based IPsec, it will be
used with turning "policies" off in swanctl.conf.

Type: feature

Signed-off-by: Atzm Watanabe <atzmism@gmail.com>
Change-Id: I58fb94bfe56627fa7002d9b95c48930a32993d2d
extras/strongswan/vpp_sswan/kernel_vpp_ipsec.c diff | blob | history
Vector Packet Processing