[Swan-dev] Can Libreswan be used only for IKEv2 negotiation and not for IPsec?

Paul Wouters paul at nohats.ca
Mon Apr 25 22:27:39 EEST 2022


This is done automatically for CPU hardware and with nic-offload=yes for NIC hardware.

Paul

Sent using a virtual keyboard on a phone

> On Apr 25, 2022, at 20:37, Balaji Thoguluva <tbbalaji at gmail.com> wrote:
> 
> 
> Hi Folks,
> 
> I would like to know if I could use Libreswan just for IKEv2 negotiation alone and assuming after successful IKEv2 negotiation, perform the IPsec encryption/decryption using proprietary hardware since it is a CPU intensive operation?
> 
> If yes, do you have any reference to the API's in the source code that will export the negotiated IPsec SA parameters to the user?
> 
> Also any reference to guidelines on how to achieve this?
> 
> Thanks,
> Balaji
> _______________________________________________
> Swan-dev mailing list
> Swan-dev at lists.libreswan.org
> https://lists.libreswan.org/mailman/listinfo/swan-dev


More information about the Swan-dev mailing list