[strongSwan-dev] df-bit and dscp features

[Martin Willi]

Hi Jordan,

>    - copy DF-bit [...]
>    - copy dscp [...]
> 
> Are these features supported by strongswan?

No, currently not. It is something that requires support from the
kernel. strongSwan itself could just enable/disable such an option.

There is a XFRM_STATE_DECAP_DSCP flag in XFRM that could be set.
However, it seems that this flag applies to input transformation only.

Regards
Martin