[Openswan Users] Trafic Shapping

Paul Wouters paul at xelerance.com
Mon Sep 18 10:15:05 EDT 2006


On Mon, 18 Sep 2006, Fernando Blankleder wrote:

> Hi ! , does anybody know how to "Mask" Ipsec trafic to avoid Trafic shaping

If the traffic shaping is happening on protocol ESP only, you could use
forceencaps=yes to force udp 4500 encapsulation. If that is also shaped,
then you'd have to hack both ends to run on a different port, which is
no longer "IPsec" in the technical sense. And you will probably be found
out by the quantity of your new-port traffic anyway.

If this is your ISP, simply switch to another ISP.

Paul


More information about the Users mailing list