sharpetronics/strongswan
1
0
Fork 0
mirror of https://github.com/strongswan/strongswan.git synced 2025-12-08 00:00:29 -05:00
Code Issues Projects Releases Wiki Activity

Added NEWS about job priorities and IKE_SA_INIT dropping.

Browse Source
This commit is contained in:
Tobias Brunner 2011-07-21 16:26:30 +02:00
parent 4f3ca916c5
commit 107ea60f5c
1 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
NEWS
View File

@ -9,9 +9,17 @@ strongswan-4.5.3
- The dynamic IMC/IMV libraries were moved from the plugins directory to - The dynamic IMC/IMV libraries were moved from the plugins directory to
a new imcvs directory in the prefix/lib/ipsec/ subdirectory. a new imcvs directory in the prefix/lib/ipsec/ subdirectory.
- Job priorities were introduced to prevent thread starvation caused by too
many threads handling blocking operations (such as CRL fetching). Refer to
strongswan.conf(5) for details.
- Two new strongswan.conf options allow to fine-tune performance on IKEv2
gateways by dropping IKE_SA_INIT requests on high load.
- IKEv2 charon daemon supports start PASS and DROP shunt policies - IKEv2 charon daemon supports start PASS and DROP shunt policies
preventing traffic to go through IPsec connections. Installation of the preventing traffic to go through IPsec connections. Installation of the
shunt policies either via the XFRM netfilter or PFKEYv2 IPsec kernel interfaces. shunt policies either via the XFRM netfilter or PFKEYv2 IPsec kernel
interfaces.
- The history of policies installed in the kernel is now tracked so that e.g. - The history of policies installed in the kernel is now tracked so that e.g.
trap policies are correctly updated when reauthenticated SAs are terminated. trap policies are correctly updated when reauthenticated SAs are terminated.