[strongSwan] initiate from both sides

[bls s]

I can’t speak to “support”, but it definitely works.  See https://github.com/gitbls/pistrong. The makeTunnel script can build this.



From: Christoph Harder<mailto:c_harder at arcor.de>
Sent: Friday, November 13, 2020 12:08 AM
To: users at lists.strongswan.org<mailto:users at lists.strongswan.org>
Subject: [strongSwan] initiate from both sides

Hello everyone,

I'm using Strongswan on FreeBSD and wanted to ask if it is possible to have a tunnel initiated by both sides?
Currently I have one side witch uses start/restart/start for the start/dpd/stop actions and one side that uses trap/trap/trap.
However since I have dynamic ips on both sides, I'm relying on dynamic dns to find the other host. But propagation of the new address takes a while, which results in delays after the ip of the responder changes.
If both sides would be initiating/reinitiating the tunnels, the problem would be solved because if one side can't initiate the tunnel, due to dns propagation delays the other side would be able to connect. (Well, unless both sides get new ips at the same time.)
Is this kond of configuration supported?

Best regards,
Christoph

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20201113/9d772719/attachment.html>