Paul Wouters

placeholder to suppress warning

_STACKMANAGER 8 16 Nov 2012 libreswan Executable programs
ipsec _stackmanager internal script to bring up kernel components for Libreswan
`ipsec` _stackmanager start `ipsec` _stackmanager stop

## DESCRIPTION

ipsec _stackmanager is called from within the init sub-system (systemd, upstart, sysv initscripts) to bring up the Libreswan kernel component as configured via the protostack= option in the ipsec.confi configuration file.

This involves loading and optionally unloading of the required kernel modules. Because the Linux kernel cannot autodetect most crypto related drivers on-demand, _stackmanager handles loading the hardware random number (RNG) device drivers, OpenBSD/FreeBSD Cryptographic Framework (OCF) drivers, CryptoAPI drivers, and the modules for the specific stack (Linux NETKEY/XFM or KLIPS/MAST). Probing for OCF supported hardware is not supported - those modules must be loaded by the system before the start of the Libreswan sub system.

## SEE ALSO

ip 8, ipsec_tncfg 8, ipsec.conf 5, ipsec_addconn 8, pluto 8

## HISTORY

This script was introduced in Libreswan. On the older Openswan systems, this functionality was split over various script files such as ipsec _startnetkey, ipsec _startklips, ipsec _realsetup and ipsec setup. Man page written for the Libreswan project <http://www.libreswan.org/> by Paul Wouters.