[Openswan Users] voip over ipsec

[Abdul-Wahid Paterson]

Hi,

Has anyone got any thoughts or experience in using VoIP over IPSec? Is
the performance to much of a hit for the VoIP to work properly. What
about packet sizes etc?

Also, under a 2.6 Kernel with no ipsec0 virtual interface, would it be
a good strategy to mark VoIP packets in the PREROUTING chain of the
mangle table to that I can then assign them to the appropriate QoS
queue before the packets are encrypted?

Any thoughts welcomed.

Abdul-Wahid