[Swan-dev] "route" vs "ondemand"

Paul Wouters paul at nohats.ca
Wed Jul 3 03:56:44 UTC 2019

On Tue, 2 Jul 2019, D. Hugh Redelmeier wrote:

> Date: Tue, 2 Jul 2019 22:56:22
> From: D. Hugh Redelmeier <hugh at mimosa.com>
> To: Libreswan Development List <swan-dev at lists.libreswan.org>
> Subject: [Swan-dev] "route" vs "ondemand"
> According to ipsec.conf(5)
> 	The option <emphasis remap='B'>ondemand</emphasis> used to be called
> 	<emphasis remap='B'>route</emphasis>
> So it sounds as if auto=route is obsolete.


> But uses are scattered through
> our tree.  I assume that they should be updated.  Any objection?
> In the case of ipsec_auto(8), --ondemand is the same as --add then
> --route.  So there is a distinction there.

Are you mising up ipsec auto --route with auto=ondemand? I wasn't aware
we obsoleted it there too. But I see we support ipsec auto --ondemand,
so I guess we did. So in that case I guess we can update it all to use
--ondemand in documentation and examples.


More information about the Swan-dev mailing list