Hi Tom, > Is the xfrm_user.ko module used for both traffic going out and coming > back in via StrongSwan / IPSEC ?
It's not used for handling traffic at all. It provides the interface to configure the IPsec stack (SAs and policies) from userland. It does rely on general Netlink infrastructure, but no idea what symbol could be missing. Maybe the kernel version doesn't match exactly? Regards, Tobias
