[strongSwan-dev] inactivity check querying policy versus SAD

Sach K sacho.polo at gmail.com
Thu Apr 18 07:35:08 CEST 2019


Thank you, Tobias for the answer.

> Other than the overhead, I guess not.

Is querying for use time via policy much faster than querying bytes from SA?

regards,
sk

On Wed, Apr 17, 2019 at 8:34 AM Tobias Brunner <tobias at strongswan.org>
wrote:

> Hi,
>
>
> > Is there a reason why policy is done
> > over SA?
>
> The SA/state has no last use time on Linux.
>
> > I was wondering if there is any harm in changing the call to
> > query for SA usage, which seems to return bytes and pkts received.
>
> Other than the overhead, I guess not.
>
> Regards,
> Tobias
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/dev/attachments/20190417/1064c3a7/attachment.html>


More information about the Dev mailing list