strongswan/src/libcharon/sa
Martin Willi 597e8c9e00 ike-sa: Optionally try to migrate to the best path on routing priority changes
When multihomed, a setup might prefer to dynamically stay on the cheapest
available path by using MOBIKE migrations. If the cheapest path goes away and
comes back, we currently stay on the more expensive path to reduce noise and
prevent potential migration issues. This is usually just fine for links not
generating real cost.

If we have more expensive links in the setup, it can be desirable to always
migrate to the cheapest link available. By setting charon.prefer_best_path,
charon tries to migrate to the path using the highest priority link, allowing
an external application to update routes to indirectly control MOBIKE behavior.
This option has no effect if MOBIKE is unavailable.
2017-02-17 11:19:38 +01:00
..
eap Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
ikev1 ike: Add getter for the current message ID to task manager 2017-02-08 15:03:25 +01:00
ikev2 ikev2: Ignore IKEV2_MESSAGE_ID_SYNC notifies if extension is disabled 2017-02-08 15:10:51 +01:00
xauth uclibc only defines strndup(3) if _GNU_SOURCE is defined 2014-02-19 16:11:47 +01:00
authenticator.c ikev2: Remove private AUTH_BLISS method 2015-03-04 13:54:09 +01:00
authenticator.h ikev2: Remove private AUTH_BLISS method 2015-03-04 13:54:09 +01:00
child_sa.c child-sa: Do not install mark on inbound kernel SA 2017-02-14 18:34:15 +01:00
child_sa.h Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
child_sa_manager.c Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
child_sa_manager.h Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
ike_sa.c ike-sa: Optionally try to migrate to the best path on routing priority changes 2017-02-17 11:19:38 +01:00
ike_sa.h ikev2: Negotiate support for IKE message ID synchronisation during IKE_AUTH 2017-02-08 15:03:25 +01:00
ike_sa_id.c Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
ike_sa_id.h Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
ike_sa_manager.c ikev2: Add a new state to track rekeyed IKE_SAs 2016-06-17 18:48:05 +02:00
ike_sa_manager.h Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
keymat.c ike: Define keylength for aescmac algorithm 2013-10-11 10:15:21 +02:00
keymat.h Fix various API doc issues and typos 2013-07-18 18:30:36 +02:00
redirect_manager.c Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
redirect_manager.h Fix some Doxygen issues 2016-03-11 12:25:14 +01:00
redirect_provider.h redirect-provider: Add interface to redirect clients during initial messages 2016-03-04 16:02:57 +01:00
shunt_manager.c shunt-manager: Add an optional namespace for each shunt 2017-02-16 19:24:07 +01:00
shunt_manager.h shunt-manager: Add an optional namespace for each shunt 2017-02-16 19:24:07 +01:00
task.c ikev2: Add task to handle IKEV2_MESSAGE_ID_SYNC notifies as responder 2017-02-08 15:03:25 +01:00
task.h ikev2: Add task to handle IKEV2_MESSAGE_ID_SYNC notifies as responder 2017-02-08 15:03:25 +01:00
task_manager.c Don't invoke child_updown hook twice as responder 2012-04-11 17:45:12 +02:00
task_manager.h ike: Add getter for the current message ID to task manager 2017-02-08 15:03:25 +01:00
trap_manager.c trap-manager: Allow local address to be unspecified 2016-05-06 15:56:19 +02:00
trap_manager.h Use standard unsigned integer types 2016-03-24 18:52:48 +01:00