kernel-iph Plugin » History » Version 1
Martin Willi, 03.06.2014 17:05
Document kernel-iph
| 1 | 1 | Martin Willi | h1. kernel-iph Plugin |
|---|---|---|---|
| 2 | 1 | Martin Willi | |
| 3 | 1 | Martin Willi | h2. Purpose |
| 4 | 1 | Martin Willi | |
| 5 | 1 | Martin Willi | The _kernel-iph_ plugin is a networking backend for the [[Windows]] platform using the IPHelper API family. It provides address and routing lookup functionality and installs routes for IPsec traffic. |
| 6 | 1 | Martin Willi | |
| 7 | 1 | Martin Willi | The plugin is disabled by default and can be enabled for Windows builds by adding |
| 8 | 1 | Martin Willi | <pre>--enable-kernel-iph</pre> to the ./configure options. |
| 9 | 1 | Martin Willi | |
| 10 | 1 | Martin Willi | The plugin has been introduced in strongSwan [[5.2.0]]. |
| 11 | 1 | Martin Willi | |
| 12 | 1 | Martin Willi | h2. Behavior |
| 13 | 1 | Martin Willi | |
| 14 | 1 | Martin Willi | When installing routes for IPsec policies, the backend implicitly enables IP forwarding in the Windows kernel. |
| 15 | 1 | Martin Willi | |
| 16 | 1 | Martin Willi | h2. Limitations |
| 17 | 1 | Martin Willi | |
| 18 | 1 | Martin Willi | As of [[5.2.0]], the backend does not support installation of virtual IPs for IPsec clients. Further, routes get installed to the main routing table, hence IPsec routes can not be excluded from routing lookups for IKE traffic. |