IPSEC-REDIRECT(8)
π IPSEC-REDIRECT β the ipsec-redirect manual, but make it make sense π
okay bestie, so you found IPSEC-REDIRECT(8), a lil executable-program page from the section 8 girlies, and honestly? it's a tiny page with a big job. let's get into it πΈ
β¨ NAME β¨
ipsec-redirect β redirect a connection definition with one from /etc/ipsec.conf. yep, that's the whole thing. it's giving "small but mighty" π
π¦ SYNOPSIS π¦
ipsec connectionstatus connection --redirect-to ip-address,...
[--ctlsocket /run/pluto/pluto.ctl] [--dry-run]
look at her. precise. flawless. no notes π
π DESCRIPTION π
okay so here's the tea β β you're redirecting a connection, right? if a connectionname is specified, you redirect that one. if you don't specify one, you're redirecting all the connections (main character energy, honestly).
and where do they go? to whatever you put in --redirect-to. that can be a single ip-address, or a comma-separated list of ip-addresses β and when it's a list, they get evenly distributed across them. balanced. fair. iconic. βοΈβ¨
--dry-runβ with this bad boy, the underlyingwhackoraddconncommand gets displayed but not executed. so you can peek at what it would do without actually committing. look don't touch, fr fr π
π SEE ALSO π
the whole extended universe, in order, no cap:
ipsec.conf(5)ipsec(8)ipsec-add(8)ipsec-algparse(8)ipsec-briefconnectionstatus(8)ipsec-briefstatus(8)ipsec-certutil(8)ipsec-checkconfig(8)ipsec-checknflog(8)ipsec-checknss(8)ipsec-connectionstatus(8)ipsec-crlutil(8)ipsec-delete(8)ipsec-down(8)ipsec-ecdsasigkey(8)ipsec-fetchcrls(8)ipsec-fipsstatus(8)ipsec-globalstatus(8)ipsec-import(8)ipsec-initnss(8)ipsec-letsencrypt(8)ipsec-listall(8)ipsec-listcacerts(8)ipsec-listcerts(8)ipsec-listcrls(8)ipsec-listen(8)ipsec-listpubkeys(8)ipsec-modutil(8)ipsec-newhostkey(8)ipsec-ondemand(8)ipsec-pk12util(8)ipsec-pluto(8)ipsec-pluto(8)ipsec-purgeocsp(8)ipsec-replace(8)ipsec-rereadall(8)ipsec-rereadcerts(8)ipsec-rereadsecrets(8)ipsec-restart(8)ipsec-route(8)ipsec-rsasigkey(8)ipsec-setup(8)ipsec-showhostkey(8)ipsec-showroute(8)ipsec-showstates(8)ipsec-shuntstatus(8)ipsec-start(8)ipsec-status(8)ipsec-stop(8)ipsec-trafficstatus(8)ipsec-unroute(8)ipsec-up(8)ipsec-vfychain(8)ipsec-whack(8)
(wait, did you clock that ipsec-pluto(8) shows up twice in that list? yeah. i'm not fixing it. that's just how it is. canon β¨)
if you're the type to read the whole shelf, this is your moment. iykyk π
π BUGS π
none
literally none. she's clean. not a single bug to report. we love a low-maintenance icon ππ
π«Ά AUTHOR π«Ά
- Andrew Cagney
- Tuomo Soini
say thank you to the authors, besties, they did that π
that's the whole page!! short, sweet, and fully functional. Libreswan 5.4.1, dated 10/23/2026 β go redirect something and slay π ππ¦
π¦ where this page comes from
- fedora 43: libreswan 5.4.1-1.fc43 Β· GPL-2.0-or-later AND MPL-2.0
- fedora 44: libreswan 5.4.1-1.fc44 Β· GPL-2.0-or-later AND MPL-2.0
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms