C代码示例：通过socket接口使用XFRM_MSG_NEWSA新增xfrm_usersa_info

#include <linux/xfrm.h> #include <sys/socket.h>

int main() { struct xfrm_usersa_info sa_info; int fd = socket(AF_INET, SOCK_DGRAM, 0); sa_info.family = AF_INET; sa_info.saddr = inet_addr('192.168.1.1'); sa_info.sport = htons(5001); sa_info.daddr = inet_addr('192.168.2.1'); sa_info.dport = htons(5002); sa_info.spi = 1234; sa_info.reqid = 0; sa_info.mode = XFRM_MODE_TRANSPORT; sa_info.replay_window = 64; sa_info.flags = XFRM_STATE_ESN; sa_info.aalgos = NULL; sa_info.ealgos = NULL; sa_info.calgos = NULL; sa_info.aead = NULL; sa_info.auth_trunc = 0; sa_info.encap = NULL; sa_info.tfc_pad = 0; sa_info.mark = 0; sa_info.sel.family = AF_INET; sa_info.sel.saddr = inet_addr('192.168.1.0'); sa_info.sel.prefixlen_s = 24; sa_info.sel.daddr = inet_addr('192.168.2.0'); sa_info.sel.prefixlen_d = 24; sa_info.reqid_out = 0; sa_info.sel.family = AF_INET; sa_info.sel.saddr = inet_addr('192.168.2.0'); sa_info.sel.prefixlen_s = 24; sa_info.sel.daddr = inet_addr('192.168.1.0'); sa_info.sel.prefixlen_d = 24; sa_info.reqid_in = 0; if (setsockopt(fd, SOL_XFRM, XFRM_MSG_NEWSA, &sa_info, sizeof(sa_info)) < 0) { perror("setsockopt"); return 1; } return 0; }