[strongSwan-dev] StrongSwan Implementation Modification

Martin Willi martin at strongswan.org
Wed May 2 11:37:40 CEST 2012

> Just one short question, Does all the open source IPsec
> implementations have the same behaviour that ESP processing and SPD
> are maintained in Linux kernel ?

Most IPsec implementations handle it this way for performance reasons.
There are, however, other IPsec stacks for Linux (such as KLIPS). Other
operating systems use different kernel implementations, and some of them
can be used by strongSwan using the standardized PF_KEY interface to the


More information about the Dev mailing list