[strongSwan-dev] df-bit and dscp features

Martin Willi martin at strongswan.org
Thu May 16 10:08:22 CEST 2013

Hi Jordan,

>    - copy DF-bit [...]
>    - copy dscp [...]
> Are these features supported by strongswan?

No, currently not. It is something that requires support from the
kernel. strongSwan itself could just enable/disable such an option.

There is a XFRM_STATE_DECAP_DSCP flag in XFRM that could be set.
However, it seems that this flag applies to input transformation only.


More information about the Dev mailing list