[strongSwan-dev] inactivity check querying policy versus SAD
Sach K
sacho.polo at gmail.com
Thu Apr 18 07:35:08 CEST 2019
Thank you, Tobias for the answer.
> Other than the overhead, I guess not.
Is querying for use time via policy much faster than querying bytes from SA?
regards,
sk
On Wed, Apr 17, 2019 at 8:34 AM Tobias Brunner <tobias at strongswan.org>
wrote:
> Hi,
>
>
> > Is there a reason why policy is done
> > over SA?
>
> The SA/state has no last use time on Linux.
>
> > I was wondering if there is any harm in changing the call to
> > query for SA usage, which seems to return bytes and pkts received.
>
> Other than the overhead, I guess not.
>
> Regards,
> Tobias
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/dev/attachments/20190417/1064c3a7/attachment.html>
More information about the Dev
mailing list