GRE tunnel: Difference between revisions

From Nasqueron Agora
← Older edit
Duranzed (talk | contribs)
24 edits
Duranzed (talk | contribs)
24 edits
No edit summary
Duranzed (talk | contribs)
24 edits
 
(13 intermediate revisions by the same user not shown)
Line 1: Line 1:
==IPsec solutions ==
==IPsec solutions ==


#'''IPsec solutions Racoon2 Libreswan Strongswan.'''
===IPsec solutions: Racoon2, Libreswan and Strongswan.===


'''1. Racoon2:'''
'''1. Racoon2:'''
**Advantages:
;Advantages :
-Lightweight and easy to use with minimal CPU/RAM usage, compared to other solutions.
* Lightweight and easy to use with minimal CPU/RAM usage, compared to other solutions.
- Native on FreeBSD.
* Native on FreeBSD.
- Simple configuration for point-to-point.
* Simple configuration for point-to-point.


**Disadvantages:
;Disadvantages:
- Project not actively maintained, last update was in 2020.
* Project not actively maintained, last update was in 2020.
- Limited support for modern features (IKEv2, NAT traversal), configuration is possible but may be more complex than others solutions.
* Limited support for modern features (IKEv2, NAT traversal), configuration is possible but may be more complex than others solutions.
- Apple clients can have difficulty connecting because of the limitations of pfkeyv2 interface to the linux kernel that racoon2 uses.
* Apple clients can have difficulty connecting because of the limitations of pfkeyv2 interface to the linux kernel that racoon2 uses.
- Harder to configure for complex setups.
* Harder to configure for complex setups.


'''2. Libreswan:'''
'''2. Libreswan:'''
**Advantages:
;Advantages:
- Actively maintained and stable on older hardware
* Actively maintained and stable on older hardware
- IRC community.
* IRC community.
- Support NAT traversal, IKEv2 and enterprise VPN.
* Support NAT traversal, IKEv2 and enterprise VPN.


**Disadvantages:
;Disadvantages:
- Less native support on FreeBSD.
* Less native support on FreeBSD.
- heavier on ressource usage.
* heavier on ressource usage.
- might need kernel patches.
* might need kernel patches.


'''3. Strongswan:'''
'''3. Strongswan:'''
**Advantages:
;Advantages:
- Modern and actively maintained.
- Full support for IKEv2, EAP, PKI and Mobike
- Well documented with community support.
- Native of FreeBSD and Linux.


**Disadvantages:
* Actively maintained with an active community on IRC.
- More complex to configure than racoon2 and libreswan.
* Full support for IKEv2, EAP, PKI and Mobike
- Slightly heavier on ressources
* Well documented with community support.
* Native of FreeBSD and Linux.
 
;Disadvantages:
 
* More complex to configure than racoon2 and libreswan.
* Slightly heavier on ressources


#'''Summary:'''
#'''Summary:'''


**Racoon2: easier to configure for basic setups but it is a deprecated project
*'''Racoon2''': easier to configure for basic setups but it is a deprecated project
**Libreswan: stable and maintained but less native on FreeBSD, might need kernel patches.
*'''Libreswan''': stable and maintained but less native on FreeBSD, might need kernel patches.
**Strongswan: Most modern solution with good documentation and community supports more protocols than the other solutions but might be more complex to configure and is heavier than others solutions
*'''Strongswan''': Most complete solution with good documentation and community supports, more protocols than other solutions but might be more complex to configure and is heavier than other solutions.
 
'''NOTE''': Libreswan and Strongwan are both based on FreeS/WAN project, Libreswan is closer to it's origin whereas Strongwan is a full reimplementation with a focus on IKEv2 and strong authentification
 
==== Official documentation ====
*[https://docs.strongswan.org/docs/latest/index.html/ StronSgwan doc]
*[https://libreswan.org/man/ LibreSwan doc]
*[https://github.com/zoulasc/racoon2/ Racoon2 doc]
 
Linked to {{T|2202}}

Latest revision as of 14:36, 9 February 2026

IPsec solutions

IPsec solutions: Racoon2, Libreswan and Strongswan.

1. Racoon2:

Advantages
  • Lightweight and easy to use with minimal CPU/RAM usage, compared to other solutions.
  • Native on FreeBSD.
  • Simple configuration for point-to-point.
Disadvantages
  • Project not actively maintained, last update was in 2020.
  • Limited support for modern features (IKEv2, NAT traversal), configuration is possible but may be more complex than others solutions.
  • Apple clients can have difficulty connecting because of the limitations of pfkeyv2 interface to the linux kernel that racoon2 uses.
  • Harder to configure for complex setups.

2. Libreswan:

Advantages
  • Actively maintained and stable on older hardware
  • IRC community.
  • Support NAT traversal, IKEv2 and enterprise VPN.
Disadvantages
  • Less native support on FreeBSD.
  • heavier on ressource usage.
  • might need kernel patches.

3. Strongswan:

Advantages
  • Actively maintained with an active community on IRC.
  • Full support for IKEv2, EAP, PKI and Mobike
  • Well documented with community support.
  • Native of FreeBSD and Linux.
Disadvantages
  • More complex to configure than racoon2 and libreswan.
  • Slightly heavier on ressources
  1. Summary:
  • Racoon2: easier to configure for basic setups but it is a deprecated project
  • Libreswan: stable and maintained but less native on FreeBSD, might need kernel patches.
  • Strongswan: Most complete solution with good documentation and community supports, more protocols than other solutions but might be more complex to configure and is heavier than other solutions.

NOTE: Libreswan and Strongwan are both based on FreeS/WAN project, Libreswan is closer to it's origin whereas Strongwan is a full reimplementation with a focus on IKEv2 and strong authentification

Official documentation

Linked to T2202

Retrieved from "https://agora.nasqueron.org/index.php?title=GRE_tunnel&oldid=2235"