Commit Graph
5 Commits
Author SHA1 Message Date
Noel KuntzeandTobias Brunner 09f4bccfea kernel-netlink: Implement passthrough type routes and use them on Linux
Enables us to ignore any future kernel features for routes unless
we actually need to consider them for the source IP routes.

Also enables us to actually really skip IPsec processing for those networks
(because even the routes don't touch those packets). It's more what
users expect.

Co-authored-by: Tobias Brunner <[email protected]>
2020-03-10 10:20:58 +01:00
Noel Kuntze 693107f6ae swanctl: Reformulate IKEv1 selector restriction, describe problems with TS narrowing 2017-03-23 18:27:05 +01:00
Noel Kuntze 11ebba0042 man: Describe the tunneling of several subnets with IKEv1 in more detail 2017-03-23 18:26:54 +01:00
Noel Kuntze c055c7013e man: Add note about modeconfig having to match 2017-03-23 18:16:45 +01:00
Noel Kuntze 31456d1f85 man: Describe what happens when a FQDN is specified in left or right 2017-03-20 10:18:51 +01:00