ipsec encryption only via given route

[Eugene Grosbein]

20.07.2017 23:17, Kajetan Staszkiewicz пишет:
> Hey group,

> Can I somehow make IPsec encryption to happen AFTER routing decision and 
> ensure that it happens only when traffic leaves via specified interface?

You may want to upgrade to 11.1-RELEASE and utilize its new if_ipsec(4) feature
targeted for creating route-based VPNs.

https://www.freebsd.org/cgi/man.cgi?query=if_ipsec&apropos=0&sektion=0&manpath=FreeBSD+11.1-RELEASE&arch=default&format=html