[strongSwan-dev] strongswan PFP support

Martin Willi martin at strongswan.org
Wed Jan 9 17:17:23 CET 2013

> From the strongswan view, how to treat this PFP feature? Is there any
> plan to implement this PFP feature for strongswan?

We currently have no plans to implement such a functionality.

> Does also Linux Kernel need to be updated to support PFP
> feature?

Probably not. XFRM sends the details of the packet triggering the SA to
the keying daemon. Based on that, charon could negotiate SAs specific to
this traffic selector.


More information about the Dev mailing list