ipsec_show(8)

ipsec_show8

See if a target ip address would get encrypted or not

Usage

ipsec show IP-address

Overview

The ipsec show show if the target IP address would get encrypted. Currently requires the XFRM/NETKEY stack root access. If no target IP is given, show all active source - dest tunnels.

Releases

3 releases since Debian 10 (Buster); the text changed 2 times.

  1. 10
  2. 11
  3. 12

History

Written originally for the Libreswan Project by Paul Wouters

Bugs

It's pretty simplistic, so there might be cases where it is wrong. There is also obviously a race condition if you run this show and right afterwards the tunnel goes down.

Author

Paul Wouters

placeholder to suppress warning

From libreswan 4.10-2+deb12u1 in Debian 12 (Bookworm). Parsed by carta from the page's man source.