We’re rewarding the question askers & reputations are being recalculated! Read more.
    Notice removed Improve details by Community
    Bounty Ended with no winning answer by Community
    Tweeted twitter.com/#!/StackSecurity/status/616911225683898368
    Notice added Improve details by Zaksh
    Bounty Started worth 50 reputation by Zaksh
2 Adjusted formatting
source | link

I am using ip xfrm state and ip xfrm policy commands from iproute2 tool to implement IPSec. I have read documentation of iproute2 (http://is.muni.cz/th/207915/fi_b/iproute.pdfiproute2 (PDF)) and ip-xfrm man (http://man7.org/linux/man-pages/man8/ip-xfrm.8.html man page). On The man page it is writtenstates:

LIMIT-LIST := [ LIMIT-LIST ] limit LIMIT

LIMIT := { time-soft | time-hard | time-use-soft | time-use-hard } SECONDS | { byte-soft | byte-hard } SIZE | { packet-soft | packet-hard } COUNT

LIMIT-LIST sets limits in seconds, bytes, or numbers of packets.

Unfortunately, I couldn't find any documentation which explains the difference between time-soft vs time-hard and time-use-soft vs time-use-hard. Can anyone please explain these LIMIT types or any documentation reference ?

I am using ip xfrm state and ip xfrm policy commands from iproute2 tool to implement IPSec. I have read documentation of iproute2 (http://is.muni.cz/th/207915/fi_b/iproute.pdf) and ip-xfrm man (http://man7.org/linux/man-pages/man8/ip-xfrm.8.html). On man page it is written

LIMIT-LIST := [ LIMIT-LIST ] limit LIMIT

LIMIT := { time-soft | time-hard | time-use-soft | time-use-hard } SECONDS | { byte-soft | byte-hard } SIZE | { packet-soft | packet-hard } COUNT

LIMIT-LIST sets limits in seconds, bytes, or numbers of packets.

Unfortunately, I couldn't find any documentation which explains the difference between time-soft vs time-hard and time-use-soft vs time-use-hard. Can anyone please explain these LIMIT types or any documentation reference ?

I am using ip xfrm state and ip xfrm policy commands from iproute2 tool to implement IPSec. I have read documentation of iproute2 (PDF) and ip-xfrm man page. The man page states:

LIMIT-LIST := [ LIMIT-LIST ] limit LIMIT

LIMIT := { time-soft | time-hard | time-use-soft | time-use-hard } SECONDS | { byte-soft | byte-hard } SIZE | { packet-soft | packet-hard } COUNT

LIMIT-LIST sets limits in seconds, bytes, or numbers of packets.

Unfortunately, I couldn't find any documentation which explains the difference between time-soft vs time-hard and time-use-soft vs time-use-hard. Can anyone please explain these LIMIT types or any documentation reference ?

1
source | link

ip xfrm limit in iproute2 for ipsec

I am using ip xfrm state and ip xfrm policy commands from iproute2 tool to implement IPSec. I have read documentation of iproute2 (http://is.muni.cz/th/207915/fi_b/iproute.pdf) and ip-xfrm man (http://man7.org/linux/man-pages/man8/ip-xfrm.8.html). On man page it is written

LIMIT-LIST := [ LIMIT-LIST ] limit LIMIT

LIMIT := { time-soft | time-hard | time-use-soft | time-use-hard } SECONDS | { byte-soft | byte-hard } SIZE | { packet-soft | packet-hard } COUNT

LIMIT-LIST sets limits in seconds, bytes, or numbers of packets.

Unfortunately, I couldn't find any documentation which explains the difference between time-soft vs time-hard and time-use-soft vs time-use-hard. Can anyone please explain these LIMIT types or any documentation reference ?