[Openswan Users] Openswan Xen & Klips

[Paul Wouters]

On Fri, 16 Sep 2011, Laurent Jouannic wrote:

> Hi to the ML,
>
> I got some trouble to use openswan.
> I need to use ipsec0 as an interface and to use ipsec0 it's seems that
> the only way is to compile the kernel.
>
> But the host is a virtual machine, with a 'xen'ified kernel.
>
> Is the only way to compile the kernel for domU?
> If it is, do you compile in dom0 or in domU?

most xen kernels these days are identical for dom0 and domU. If you create
one with support for KLIPS, you can run it on the host or guest.

For example, the ubuntu packages we build are actually running on some
xen guests

ftp://ftp.openswan.org/openswan/binaries/ubuntu/

Paul