[strongSwan] Multiple charons on same hardware.

Tobias Brunner tobias at strongswan.org
Thu Jul 23 17:52:00 CEST 2015


> I have a test requirement where I need to run multiple charon daemons on
> the same machine(machine has multiple virtual routing instances). How
> can I achieve this? Right now, if I have to run multiple daemons, I have
> to compile the binaries each time with different configuration paths
> (such as the binary path, ipsec.conf path etc..) manually, install them
> and run each binary separately. Are there any alternatives to this.

Have a look at [1].  If you are not using network namespaces (not sure
if that's what you mean with "virtual routing instances") running
multiple daemons is not recommended as all instances will compete for
control over the IPsec stack in the kernel.

Regards,
Tobias

[1] https://wiki.strongswan.org/projects/strongswan/wiki/Netns



More information about the Users mailing list