Hi Christophe, > I had a look in the mark-inbound-sa branch, I think there are other > methods where the SA mark must be set: child_sa_t.update, > child_sa_t.destroy.
You're right, thanks! (You missed the one in update_usebytes() btw.) While I appreciate your creating that stroke patch, I probably won't apply it. We need to stop adding new features to starter/stroke. Maybe that will get people to abandon the legacy interface and switch to swanctl/vici already. Regards, Tobias
