[Swan-dev] xfrmi work conflict
Paul Wouters
paul at nohats.ca
Sat Sep 19 15:32:36 UTC 2020
On Fri, 18 Sep 2020, Paul Wouters wrote:
>> I feel as it is PLUTO_XFRMI_REMAP_IF_ID_ZERO is a horrible hack and my
>> predication is it is more pain than what it is worth.
> As for the actual mapping of ipsec0 name to an if_id that is not 0,
> there is not much choice if we want to support the ipsec0 name without
> letting users fully set their own names - which you wanted to avoid and
> why we ended up on the ipsec-inteface= option. I am not invested in the
> way of this hack and the specific PLUTO_XFRMI_REMAP_IF_ID_ZERO number.
> If there is a better way to doing the remapping, I am fine with it.
If you prefer ipsecX mapping to if_id X+1, I'm okay with that too. I
personally prefer the remap, but can live with the "off by 1" method
as well.
Paul
More information about the Swan-dev
mailing list