First page Back Continue Last page Overview Graphics
Labeled IPSEC
Implicit packet labeling via IPSEC/xfrm.
Security contexts exchanged by IKE daemons.
Several extensions and improvements in 2006:
- Granular security associations based on socket context.
- Support for obtaining peer security context.
- Flow and sock labeling.
- MLS labeling of child sockets.
Enables integration of network protection with data labeling.