A tunnel brought up over a connection in the XGS 136's hardware. Measured, 2026-10-20¶
Until this, a connection the XGS 136 had put in hardware stayed there when an IPsec policy came to cover it, and its frames went on leaving the appliance unencrypted (issue 575). Now the flow maker asks the kernel's policy database, as the XGS 3300's driver has since its tunnel flows: a connection a policy covers is never made into a flow, and one already in hardware is taken out the moment a policy comes to cover it. Measured both ways, on the build before and the build after.
The whole page, with how it was taken and what it does not show: A tunnel brought up over a connection in the XGS 136's hardware. Measured, 2026-10-20.
The discussion of this page is held in the project's GitHub Discussions. Showing it here loads giscus from giscus.app and GitHub, and writing in it needs a GitHub account - what that means.