Herbert Xu wrote: > jamal <[EMAIL PROTECTED]> wrote: >> There are two issues that are inter-mingled in there. The most important >> is pf_key not being robust on dump. The other being the accurracy of > > IMHO doing significant work on af_key is a waste of time. It has no > advantages at all over xfrm_user since neither is portable. So we > should discourage people from using af_key wherever possible.
I don't know about netlink. But pfkey works in *BSD too and it is RFC'd. So I'd say pfkey might be a bit more portable. Though netlink is definitely more robust and extensive. Cheers, Timo -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html