[strongSwan-dev] inactivity check querying policy versus SAD

Tobias Brunner tobias at strongswan.org
Thu Apr 18 13:08:23 CEST 2019


Hi,

>> Other than the overhead, I guess not.
> 
> Is querying for use time via policy much faster than querying bytes from SA?

No, but it's not the same thing and if you want both you need two kernel
calls.

Regards,
Tobias


More information about the Dev mailing list