[Openswan Users] nhelpers

Paul Wouters paul at xelerance.com
Fri May 1 17:23:00 EDT 2009

On Fri, 1 May 2009, Jon James wrote:

> Can anyone explain the concept of nhelpers?
> What do they do?
> When should they be used?

They do crypto work and DNS work, asynchronously from the main IKE
daemon. This protects against blocking/waiting and DOS attacks. They
can also offload crypto to hardware.

It's best to use them in their default settings, though earlier versions
of openswan had some problems with these, and people tended to disable


More information about the Users mailing list