[Openswan Users] NetKey or KLIPS

[Marco Berizzi]

Jean-Michel Caricand wrote:

> I want to know what is the best stack : netkey or klips ?

http://lists.openswan.org/pipermail/users/2005-November/007490.html
http://lists.openswan.org/pipermail/users/2005-June/005243.html

Netkey PRO:

support ipv6
nat of clear packets is supported since 2.6.16
with policy match
no need to patch linux kernel

KLIPS PRO:

running tcpdump on ipsecX device show you
all clear packets (both in and out)