[strongSwan] libipsec design decision - using NFQUEUE vs virtual interfaces

[Tobias Brunner]

Hi Plevin,

>    "is there any reason one should *not* implement a userspace IPsec stack using Netfilter and NFQUEUEs in combination 
> with Strongswan"?

Portability.

Regards,
Tobias