Linux Implementation

• Kernel netfilter hooks for packets

  • Data extracted, sent to user process, processed for securelink, returned to kernel, sent on its way

• User process

  • Encrypt & authenticate, content only
  • Database of connections
  • Key management

Notes: