Difference between revisions of "IPsec"

From OpenVZ Virtuozzo Containers Wiki
Jump to: navigation, search
(created)
 
 
(3 intermediate revisions by 2 users not shown)
Line 1: Line 1:
 
For IPsec to work inside a container:
 
For IPsec to work inside a container:
 
* Kernel 042stab084.8 or later
 
* Kernel 042stab084.8 or later
* Kernel module <code>af_key</code> must be loaded before starting containers
+
* The following kernel modules must be loaded before container start:
 +
: <code>af_key esp4 esp6 xfrm4_mode_tunnel xfrm6_mode_tunnel</code>
 
* Capability <code>net_admin</code> must be granted to a container
 
* Capability <code>net_admin</code> must be granted to a container
  
 
Tested with libreswan.
 
Tested with libreswan.
  
[[Categories: HOWTO]]
+
Limitations:
 +
* online migration on a Container with IPsec inside - does not work
 +
 
 +
[[Category: HOWTO]]
 +
[[Category: Networking]]
 +
[[Category: TRD]]

Latest revision as of 13:56, 13 October 2015

For IPsec to work inside a container:

  • Kernel 042stab084.8 or later
  • The following kernel modules must be loaded before container start:
af_key esp4 esp6 xfrm4_mode_tunnel xfrm6_mode_tunnel
  • Capability net_admin must be granted to a container

Tested with libreswan.

Limitations:

  • online migration on a Container with IPsec inside - does not work