[strongSwan] tunneling IPsec through HTTP proxies / HTTP CONNECT

[Daniel Pocock]

Is anybody aware of any IPsec solutions that offer a way to tunnel
through HTTP proxies / HTTP CONNECT?

I found some previous discussions about it in the StrongSWAN mailing
list and bug tracker:


https://lists.strongswan.org/pipermail/users/2013-October/005403.html

https://wiki.strongswan.org/issues/1060


I fully understand that IPsec is not TCP, etc and I also realize that
performance would be degraded.  Nonetheless, in those environments where
nothing else works some people may find this type of thing is better
than nothing.  OpenVPN can work this way, but then it isn't IPsec at all.