<html><head></head><body>Hi,<br><br>Dynamic routig works works good with route based ipsec. Some time I wrote a blog article about ipsec and bgp with bird. See blog.sys4.de<br><br>Michael<br><br><div class="gmail_quote">Am 8. August 2019 15:04:14 MESZ schrieb Ondrej Zajicek <santiago@crfreenet.org>:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<pre class="k9mail">On Mon, Jun 17, 2019 at 10:59:00AM +0000, Kenth Eriksson wrote:<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;">Hi!<br></blockquote><br>Hi<br><br>Sorry for late reply, i finally got to answer some mails i missed in the<br>past due to my mail delivery issue:<br><br><a href="https://bird.network.cz/pipermail/bird-users/2019-July/013549.html">https://bird.network.cz/pipermail/bird-users/2019-July/013549.html</a><br><br><br><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;">What is the plan for IPsec with regards to OSPFv3? Is it part of<br>roadmap?<br></blockquote><br>We do not have any plans for IPsec for OSPFv3. AFAIK, IPsec is not well<br>suited for multicast and RFC 7166 is a better solution for OSPFv3.<br><br>OTOH, it is something that seems to be easy to implement, as it is just<br>a few syscalls to configure manual SA entries. So patches are welcome.<br><br><br><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;">If not a roadmap item, what is the recommended way to get IPsec support<br>for OSPFv3 with bird? libreswan?<br></blockquote><br>Where was setkey command from ipsec-tools, which would likely allow<br>configuring manual SA entries necessary for OSPFv3, but it seems to be<br>abandoned.<br><br>I do not think that libreswan or other dynamic keying daemons are<br>applicable for OSPFv3 due to its multicast nature.<br></pre></blockquote></div><br>-- <br>Diese Nachricht wurde von meinem Android-Gerät mit K-9 Mail gesendet.</body></html>