Subject: Placement of IKE

From: "Amey Gokhale" <[email-masked]>
Date: Fri, 29 Jun 2001 05:23:40 +0100

Hello all,

I am working on developing a VPN gateway. It;s in the design phase. Most of the products which i studied are having IKE engine in the user space. Being in the detailed design phase, i want to know the reasons of placing IKE engine in the user space as i don;t want to blindly follow what other products are giving. 
I will be using only one authentication method for IKE SA establishment i.e. Pre-shared Keys. 
So I am thinking of putting IKE in kernel space. As  considerable time will be spent between communication of IKE engine if placed in user space and kernel space IPSEC engine. 

So can anyone throw some light on it??
waiting for ur replies.
Thanks in advance
Amey.