]> git.ipfire.org Git - people/ms/network.git/commit - config/vpn/security-policies/system
projects / people / ms / network.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 78f1803) | patch
ipsec: Disable compression in system policy
authorMichael Tremer <michael.tremer@ipfire.org>
Thu, 3 Aug 2017 12:08:04 +0000 (12:08 +0000)
committerMichael Tremer <michael.tremer@ipfire.org>
Thu, 3 Aug 2017 12:09:37 +0000 (12:09 +0000)
commit50b7a62f323d1ef6dfb3fe45500d44f8290a0569
tree436256bbd18d37f028d02e65264421ba364ae5ectree | snapshot
parent78f1803f50416a853bba0c407f32089a3ad1b961commit | diff
ipsec: Disable compression in system policy

Compression in IPsec is slow (strongSwan only supports
DEFLATE) and there are security concerns about it
revealing information about the plaintext.

So for a little gain in bandwith, it does not seem to
be right to take that risk right now.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
config/vpn/security-policies/system diff | blob | blame | history
Networking code of IPFire 3.x.