search

OpenFastPath / ofp

OpenFastPath project
BSD 3-Clause "New" or "Revised" License
349 stars 126 forks source link

Discuss IPSec #221

Open FloraKawui opened 5 years ago

FloraKawui commented 5 years ago

1、Currently,IPSec only support manual configuration of SAD and SPA. Is there any plan to support automatic negotiation IKE in the future? 2、If we use Racoon in ipsec-tools to negotiate SAD and SPD, how does this tool work with ofp?

JereLeppanen commented 5 years ago
  1. There is no concrete plan, but IKE support is definitely a desirable feature.
  2. It doesn't. It might be possible, for example, to modify racoon to use OFP API to configure OFP SPD and SAD in some scenarios. Something like this may be one possible way of bringing IKE support to OFP, but it's not a small work.