[strongSwan-dev] StrongSwan Implementation Modification

[Martin Willi]

> Just one short question, Does all the open source IPsec
> implementations have the same behaviour that ESP processing and SPD
> are maintained in Linux kernel ?

Most IPsec implementations handle it this way for performance reasons.
There are, however, other IPsec stacks for Linux (such as KLIPS). Other
operating systems use different kernel implementations, and some of them
can be used by strongSwan using the standardized PF_KEY interface to the
kernel.

Regards
Martin