A new bloc IPV4 was added in NetBox : The 172.27.27.0/28 subnet was fully allocated and currently used by VMs on Hyper-1, so I expand it to a larger prefix by combining 172.27.27.0/28 and 172.27.27.16/28 into a single 172.27.27.0/27 subnet to allow better address utilization in the future.

The additional public IPv4 address has been received and is ready to be used for the CARP setup : IP=51.68.252.230/32

We chose to go with strongswan as it is native to FreeBSD and the most complete solution in terms of supported protocols. Strongswan has already been installed and tested on router-002 and router-003.

That's a good idea, you can add it as low priority in Frontend and assign it to @Chenani-MohamedAmine

GRE tunnel and IPsec configurations work as intended between router-002 and router-003, GRE is reachable on both sides and traffic is encrypted in IPsec with an ESP header

Clean and straightforward.

{F24385587}

We can then proceed with the CARP configuration, and if any problems occur, we will document them on the wiki :)