[strongSwan-dev] Unserviced PFKEY sockets in starter

David George dgeorgester at gmail.com
Tue May 15 09:48:36 CEST 2012


Hi Tobias.

> Thanks for the report.

Thanks for the fix, works like a charm.

> By the way, is there a reason you use PF_KEY on Linux?  There are some
> limitations in comparison to the Netlink/XFRM kernel interface.

I am really using a custom user-space IPSec stack on Linux. I am also
using a weird PF_KEY-like implementation that was running out of
memory because of this issue. A good setup to pick up the corner
cases.

Thanks again.

Kind regards,
David George




More information about the Dev mailing list