Hi Jordan,

>    - copy DF-bit [...]
>    - copy dscp [...]
> 
> Are these features supported by strongswan?

No, currently not. It is something that requires support from the
kernel. strongSwan itself could just enable/disable such an option.

There is a XFRM_STATE_DECAP_DSCP flag in XFRM that could be set.
However, it seems that this flag applies to input transformation only.

Regards
Martin


_______________________________________________
Dev mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/dev

Reply via email to