Receving a callback at XFRM ESP tunnel creation

ptz · 08-22-2016, 05:58 AM

Hi,

My goal is to run some code before actual packets begin running in an IPSec tunnel established by XFRM. For this, I am thinking of running a callback at the time of an XFRM ESP tunnel creation, where tunnel IPs and the SPI will be known. Is there a standard way of achieving this? If I'm not mistaken, registering for any event that has xfrm_state available should be enough, for instance, xfrm_add_sa, esp_init_state.

Thanks.

nini09 · 08-31-2016, 02:58 PM

You can use netlink socket called NETLINK_XFRM to communiate to XFRM module.