IPsec

From OpenVZ Virtuozzo Containers Wiki
Jump to: navigation, search

For IPsec to work inside a container:

  • Kernel 042stab084.8 or later
  • The following kernel modules must be loaded before container start:
af_key esp4 esp6 xfrm4_mode_tunnel xfrm6_mode_tunnel
  • Capability net_admin must be granted to a container

Tested with libreswan.

Limitations:

  • online migration on a Container with IPsec inside - does not work