[strongSwan] something like tinc?

[Andreas Steffen]

Hi James,

using IPsec kernel encryption you can define a virtual IP address
to be used within the tunnel.

If you insist on a tun interface then you could use the libipsec plugin
which does all the IPsec encryption/decryption in user space if you
are willing to incur the considerable loss in performance.

Best regards

Andreas

On 24.09.2015 16:36, James wrote:
> All,
>
> I was hoping someone could set me in the right direction. After using
> Tinc[1] for years I was hitting a major bottleneck as the app is tied
> to one proc.
>
> Happily switched to strognSwan -- the performance is vastly better.
>
> What I _do_ like about Tinc that seems to be missing from strongSwan
> is the ability to use private addressing. With Tinc you create a tun
> interface and assign an IP address to it; other nodes are similarly
> configured in the same address space. That new address space can then
> be used to pass traffic between nodes.
>
> Is it possible to do that with strognSwan somehow? Based on the
> documentation I poured over it appears that this is /not/ supported,
> but I wanted to double check.
>
> Many thanks in advance.

======================================================================
Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Open Source VPN Solution!          www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4275 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20150924/3ef93d00/attachment.bin>