I have 2 Linux hosts and each has 2 services, X and Y.
The X services communicate between them on UDP port x.
The Y services communicate between them on UDP port y.
I would like to encrypted the communication.
I know how to set-up a single UDP encapsulated IPSec tunnel between the 2 hosts with ipsec-tools (my network does not allow IPSec on IP...).
But how do I set-up 2 IPSec tunnels with different SPIs and keys - one for the X services and the other for the Y services?