IPsec

From OpenVZ Virtuozzo Containers Wiki
Revision as of 13:26, 25 December 2014 by Finist (talk | contribs)
Jump to: navigation, search

For IPsec to work inside a container:

  • Kernel 042stab084.8 or later
  • The following kernel modules must be loaded before container start:
af_key esp4 esp6 xfrm4_mode_tunnel xfrm6_mode_tunnel
  • Capability net_admin must be granted to a container

Tested with libreswan.

Limitations:

  • online migration on a Container with IPsec inside - does not work
Retrieved from "https://wiki.openvz.org/index.php?title=IPsec&oldid=15697"