On Fri, 18 Sep 2020, Paul Wouters wrote:
I feel as it is PLUTO_XFRMI_REMAP_IF_ID_ZERO is a horrible hack and my predication is it is more pain than what it is worth.
As for the actual mapping of ipsec0 name to an if_id that is not 0, there is not much choice if we want to support the ipsec0 name without letting users fully set their own names - which you wanted to avoid and why we ended up on the ipsec-inteface= option. I am not invested in the way of this hack and the specific PLUTO_XFRMI_REMAP_IF_ID_ZERO number. If there is a better way to doing the remapping, I am fine with it.
If you prefer ipsecX mapping to if_id X+1, I'm okay with that too. I personally prefer the remap, but can live with the "off by 1" method as well. Paul _______________________________________________ Swan-dev mailing list [email protected] https://lists.libreswan.org/mailman/listinfo/swan-dev
