Project

General

Profile

kernel-iph Plugin » History » Version 1

Martin Willi, 03.06.2014 17:05
Document kernel-iph

1 1 Martin Willi
h1. kernel-iph Plugin
2 1 Martin Willi
3 1 Martin Willi
h2. Purpose
4 1 Martin Willi
5 1 Martin Willi
The _kernel-iph_ plugin is a networking backend for the [[Windows]] platform using the IPHelper API family. It provides address and routing lookup functionality and installs routes for IPsec traffic.
6 1 Martin Willi
7 1 Martin Willi
The plugin is disabled by default and can be enabled for Windows builds by adding
8 1 Martin Willi
<pre>--enable-kernel-iph</pre> to the ./configure options.
9 1 Martin Willi
10 1 Martin Willi
The plugin has been introduced in strongSwan [[5.2.0]].
11 1 Martin Willi
12 1 Martin Willi
h2. Behavior
13 1 Martin Willi
14 1 Martin Willi
When installing routes for IPsec policies, the backend implicitly enables IP forwarding in the Windows kernel.
15 1 Martin Willi
16 1 Martin Willi
h2. Limitations
17 1 Martin Willi
18 1 Martin Willi
As of [[5.2.0]], the backend does not support installation of virtual IPs for IPsec clients. Further, routes get installed to the main routing table, hence IPsec routes can not be excluded from routing lookups for IKE traffic.