[strongSwan-dev] inactivity check querying policy versus SAD

Tobias Brunner tobias at strongswan.org
Wed Apr 17 17:34:47 CEST 2019


> Is there a reason why policy is done
> over SA?

The SA/state has no last use time on Linux.

> I was wondering if there is any harm in changing the call to
> query for SA usage, which seems to return bytes and pkts received.

Other than the overhead, I guess not.


More information about the Dev mailing list