On Mon, 25 Jul 2022, Andrew Cagney wrote:
I'd like to add a domain to the test framework. The motivation is to
allow end-to-end testing of scenarios where non IPsec domains route
their traffic through IPsec gateways. For instance:
{ROAD,TRAIN} - NORTH = NIC - {EAST,WEST}
NIC really represents the "internet" and should never run IPsec.
Maybe add a NOC on IP {NIC-1} for this purpose ?
My suggestion is to make two changes:
- add a second interface to ROAD so that it can route packets through NORTH
- add a new domain TRAIN that is behind NORTH
The old thing behind north used to be POLE. (We also had SOUTH, which
of course had a machine behind it named PARK)
Paul
_______________________________________________
Swan-dev mailing list
Swan-dev@lists.libreswan.org
https://lists.libreswan.org/mailman/listinfo/swan-dev
