ims-volte-vowifi
/
strongswan
9
0
Fork 0
Code Pull Requests Releases Activity
strongswan/src/libcharon
History
Martin Willi b8973b2661 connmark: Add CONNMARK rules to select correct output SA based on conntrack 
Currently supports transport mode connections using IPv4 only, and requires
a unique mark configured on the connection.

To select the correct outbound SA when multiple connections match (i.e.
multiple peers connected from the same IP address / NAT router) marks must be
configured. This mark should usually be unique, which can be configured in
ipsec.conf using mark=0xffffffff.

The plugin inserts CONNMARK netfilter target rules: Any peer-initiated flow
is tagged with the assigned mark as connmark. On the return path, the mark
gets restored from the conntrack entry to select the correct outbound SA.
 		2015-02-20 16:34:53 +01:00
..
attributes mem-pool: Pass the remote IKE address, to re-acquire() an address during reauth 2015-02-20 13:34:57 +01:00
bus bus: Add an ike_update() hook invoked when peer endpoints change 2015-02-20 15:33:59 +01:00
config proposal: Add default PRF for HMAC-MD5-128 and HMAC-SHA1-160 integrity algorithms 2014-10-31 10:09:54 +01:00
control ike-sa-manager: Remove IKE_SA checkout by CHILD_SA reqid 2015-02-20 13:34:51 +01:00
encoding ike: Allow creation of internally used payloads 2014-12-12 13:10:26 +01:00
kernel kernel-interface: Raise mapping event with a proto/SPI/dst tuple 2015-02-20 13:34:51 +01:00
network receiver: Send a single INVALID_MAJOR_VERSION notify for IKE version > 2 2014-07-17 09:35:49 +02:00
plugins connmark: Add CONNMARK rules to select correct output SA based on conntrack 2015-02-20 16:34:53 +01:00
processing/jobs migrate-job: Do CHILD_SA reqid lookup locally 2015-02-20 13:34:51 +01:00
sa bus: Add an ike_update() hook invoked when peer endpoints change 2015-02-20 15:33:59 +01:00
tests mem-pool: Pass the remote IKE address, to re-acquire() an address during reauth 2015-02-20 13:34:57 +01:00
Android.mk ikev2: Schedule a make-before-break completion task to delete old IKE_SA 2015-02-20 13:34:57 +01:00
Makefile.am connmark: Add a plugin stub 2015-02-20 15:33:59 +01:00
daemon.c attributes: Move the configuration attributes framework to libcharon 2015-02-20 13:34:55 +01:00
daemon.h attributes: Move the configuration attributes framework to libcharon 2015-02-20 13:34:55 +01:00
debug
…