Re: IPSec design for OSPFv3?

On 06.09.2013 22:20, Ondrej Zajicek wrote:

Although it could worked if OSes offered socket-specific API for configuring IPSec, but AFAIK it is usually needed to configure system-wide IPSec policy database, which is problematic from routing software POV.

Their is such an API for FreeBSD. netcat and inetd include examples of how it can be used. I don't know if the API works for anything else than unicast UDP.