IPSEC kernel configuration API PF_KEY will be deprecated
Issue
- From RHEL9.3 when the
af_keymodule is loaded the following dmesg appears:
Warning: Deprecated Driver is detected: PF_KEY will not be maintained in a future major release and may be disabled
"NET: Registered PF_KEY protocol family" message is expected and has always appeared. The af_key is loaded by "modprobe af_key" or whenever a program (such as the one below) requires it.
#include <sys/socket.h>
#include <linux/pfkeyv2.h>
int main(){
socket(PF_KEY, SOCK_RAW, PF_KEY_V2);
}
Environment
- Red Hat Enterprise Linux 9.3
- IPSEC
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.