[strongSwan] libipsec vs kernel implementation

[Andreas Steffen]

Hello Noel,

no there is no speed benefit with libipsec, quite to the contrary -
ESP payload encryption is much faster if done in the kernel.
libipsec is an option option if a user does not have root privileges
as is the case with Android 4.x devices offering a VPN tun device.
Under Linux there is currently no advantage with libipsec because
root privileges are still needed to open a tun device.

Best regards

Andreas

On 04/22/2013 05:18 PM, Noel Kuntze wrote:
> Hello,
> 
> Is there a reason I should use libipsec instead of the kernel
> implementation? Is there a speed benefit to it or something?
> 
> Regards,
> Noel

======================================================================
Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4468 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20130423/d0ce8b97/attachment.bin>