summaryrefslogtreecommitdiff
path: root/conf/plugins/kernel-pfkey.opt
diff options
context:
space:
mode:
authorYves-Alexis Perez <corsac@debian.org>2018-06-04 09:59:21 +0200
committerYves-Alexis Perez <corsac@debian.org>2018-06-04 09:59:21 +0200
commit51a71ee15c1bcf0e82f363a16898f571e211f9c3 (patch)
tree2a03e117d072c55cfe2863d26b73e64d933e7ad8 /conf/plugins/kernel-pfkey.opt
parent7793611ee71b576dd9c66dee327349fa64e38740 (diff)
downloadvyos-strongswan-51a71ee15c1bcf0e82f363a16898f571e211f9c3.tar.gz
vyos-strongswan-51a71ee15c1bcf0e82f363a16898f571e211f9c3.zip
New upstream version 5.6.3
Diffstat (limited to 'conf/plugins/kernel-pfkey.opt')
-rw-r--r--conf/plugins/kernel-pfkey.opt10
1 files changed, 10 insertions, 0 deletions
diff --git a/conf/plugins/kernel-pfkey.opt b/conf/plugins/kernel-pfkey.opt
index ec05215d3..0e347bebb 100644
--- a/conf/plugins/kernel-pfkey.opt
+++ b/conf/plugins/kernel-pfkey.opt
@@ -5,3 +5,13 @@ charon.plugins.kernel-pfkey.events_buffer_size = 0
Because events are received asynchronously installing e.g. lots of policies
may require a larger buffer than the default on certain platforms in order
to receive all messages.
+
+charon.plugins.kernel-pfkey.route_via_internal = no
+ Whether to use the internal or external interface in installed routes.
+
+ Whether to use the internal or external interface in installed routes.
+ The internal interface is the one where the IP address contained in the
+ local traffic selector is located, the external interface is the one over
+ which the destination address of the IPsec tunnel can be reached.
+ This is not relevant if virtual IPs are used, for which a TUN device is
+ created that's used in the routes.