[Swan-dev] xfrmi work conflict

Paul Wouters paul at nohats.ca
Sat Sep 19 15:32:36 UTC 2020


On Fri, 18 Sep 2020, Paul Wouters wrote:

>>  I feel as it is PLUTO_XFRMI_REMAP_IF_ID_ZERO is a horrible hack and my
>>  predication is it is more pain than what it is worth.

> As for the actual mapping of ipsec0 name to an if_id that is not 0,
> there is not much choice if we want to support the ipsec0 name without
> letting users fully set their own names - which you wanted to avoid and
> why we ended up on the ipsec-inteface= option. I am not invested in the
> way of this hack and the specific PLUTO_XFRMI_REMAP_IF_ID_ZERO number.
> If there is a better way to doing the remapping, I am fine with it.

If you prefer ipsecX mapping to if_id X+1, I'm okay with that too. I
personally prefer the remap, but can live with the "off by 1" method
as well.

Paul


More information about the Swan-dev mailing list