Page MenuHomeDevCentral

Pick solution for IPsec
Closed, ResolvedPublic

Description

  1. racoon2
  2. libreswan
  3. strongswan

Note : racoon2 package is deprecated, no update since 2020

Documenation related : https://agora.nasqueron.org/IPsec

Event Timeline

Duranzed renamed this task from Pick solution for tunnel to Pick solution for IPSEC.Fri, Feb 6, 11:15
Duranzed renamed this task from Pick solution for IPSEC to Pick solution for IPsec.

The on-wiki page doesn't currently give a clear overview of what it would be like to run against each solution.

There is already one thing clearly documented: the fact racoon2 isn't maintained anymore. That's good.

Now let's improve it with other useful information.

First, we need to know what to add, how to write that kind of document. Here, a LLM could help a little bit with those questions:
https://chatgpt.com/share/698cd9f3-a52c-8005-ae16-a9c12881a72a

We already know some of them, but they are still good to answer. For example, we know HA will be achieved with CARP.

So would be really nice to dig more on that.

dereckson triaged this task as Normal priority.
dereckson added a project: documentation.
dereckson moved this task from Backlog to Doc to write on the documentation board.
dereckson moved this task from Backlog to Working on on the Secure HA tunnels board.

We chose to go with strongswan as it is native to FreeBSD and the most complete solution in terms of supported protocols. Strongswan has already been installed and tested on router-002 and router-003.

Duranzed updated the task description. (Show Details)