[strongSwan] liveness mechanism for BITW IPsec
martin at strongswan.org
Mon Aug 4 11:36:15 CEST 2014
> There is any way to "tell" to strongSwan that there is traffic in order
> to avoid sending INFORMATIONAL messages in this case?
strongSwan queries the kernel-interface for SA usage. If you are using
kernel-netlink as backend, Linux usually provides this information when
querying the SA/SP state.
> In our Bump In The Wire IPsec implementation
I assume you are using a custom kernel backend for ESP processing? If
yes, you may consider adding the appropriate information in your kernel
interface when quering usage statistics with query_sa() or
More information about the Users