[strongSwan] SPD vs proxy-id

[Karol Cieśla]

Hello,
i have been wondering about two things:

1) in case of input IPSec processing,
   why after checking against SA selectors, packet is checked against SPD ?

2) I have read that proxy-id is used to direct traffic to appropriate SA,
but for the same purpose is SPD used.
What is the difference between SPD (traffic selectors) and proxy-id ?

If you can provide me an example i would be glad,

Regards,
Karol
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20130420/1c27c30f/attachment.html>