On Fri, 30 Jul 2004, bert hubert wrote:

1) One can configure ipsec over netlink (XFRM_USER), is this the preferred
interface? Is it documented somehwere, or is there some source which uses
this interface? Alternatively, is PFKEY considered deprecated?

PF_KEY is not deprecated, it's an IETF standard and required for
compliance & compatibility.  XFRM_USER is simply the native Linux
interface.


- James
-- 
James Morris
[off-list ref]