[Openswan Users] nhelpers

[Paul Wouters]

On Fri, 1 May 2009, Jon James wrote:

> Can anyone explain the concept of nhelpers?
> 
> What do they do?
> 
> When should they be used?

They do crypto work and DNS work, asynchronously from the main IKE
daemon. This protects against blocking/waiting and DOS attacks. They
can also offload crypto to hardware.

It's best to use them in their default settings, though earlier versions
of openswan had some problems with these, and people tended to disable
them.

Paul