IPSec design for OSPFv3?

[Jan Bramkamp]

On 06.09.2013 22:20, Ondrej Zajicek wrote:
> Although it could worked if OSes offered socket-specific API for
> configuring IPSec, but AFAIK it is usually needed to configure
> system-wide IPSec policy database, which is problematic from
> routing software POV.

Their is such an API for FreeBSD. netcat and inetd include examples of
how it can be used. I don't know if the API works for anything else than
unicast UDP.