On 06.09.2013 22:20, Ondrej Zajicek wrote: > Although it could worked if OSes offered socket-specific API for > configuring IPSec, but AFAIK it is usually needed to configure > system-wide IPSec policy database, which is problematic from > routing software POV.
Their is such an API for FreeBSD. netcat and inetd include examples of how it can be used. I don't know if the API works for anything else than unicast UDP.
