- racoon2
- libreswan
- strongswan
Note : racoon2 package is deprecated, no update since 2020
Documenation related : https://agora.nasqueron.org/IPsec
Note : racoon2 package is deprecated, no update since 2020
Documenation related : https://agora.nasqueron.org/IPsec
The on-wiki page doesn't currently give a clear overview of what it would be like to run against each solution.
There is already one thing clearly documented: the fact racoon2 isn't maintained anymore. That's good.
Now let's improve it with other useful information.
First, we need to know what to add, how to write that kind of document. Here, a LLM could help a little bit with those questions:
https://chatgpt.com/share/698cd9f3-a52c-8005-ae16-a9c12881a72a
We already know some of them, but they are still good to answer. For example, we know HA will be achieved with CARP.
So would be really nice to dig more on that.
We chose to go with strongswan as it is native to FreeBSD and the most complete solution in terms of supported protocols. Strongswan has already been installed and tested on router-002 and router-003.