[Openswan Users] (super-)freeswan/openwan and uml

[Michael Richardson]

-----BEGIN PGP SIGNED MESSAGE-----


>>>>> "Norbert" == Norbert Wegener <nw at sbs.de> writes:
    Norbert> I am thinking about setting up *swan based ipsec gateways using  
    Norbert> user-mode-linux.

    Norbert> Does anyone on the list have experience concerning reliabiltiy
    Norbert> when running *swan in uml? Might this be a solution for
    Norbert> production use or only for testing?

  The experiences that we have is that UMLs sometimes lock up for random
reasons during nightly testing.

  This tends to be related to timing and scripting via the console interface.
  I have found 2.4.19 based UMLs much stabler in this regard than 2.4.22ones,
but I haven't tried 2.4.24 ones yet. 

  I have no experiences of instability when just working with them. 
  I have not used them for production use.

  How you do the network plumbing to have the UML handle the traffic 
instead of the host is a good question - everything is possible, the
question is what do you want to do.
  
]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson,    Xelerance Corporation, Ottawa, ON    |net architect[
] mcr at xelerance.com      http://www.sandelman.ottawa.on.ca/mcr/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Finger me for keys

iQCVAwUBQCRLaIqHRg3pndX9AQEmnAP8CsyqlJCgIq2RGVuMlM7egqS2icTlo1+Z
a0A4tpiL597fJmFY3hxnyiq1mS3s5fcjo1ZBYEOwKpklTKtoj9IZhhhO1DNufW1T
wwXbXpl91D7tA7DiPgr0dHxq7vGNQyhmlyLVeZ6Ov0A9S6Trm+CPutsEdrtw/SsK
T94rna5DDGE=
=boMv
-----END PGP SIGNATURE-----