StrongSwan – IPsec VPN for Linux, Android, FreeBSD, Mac OS X, Windows • Hacker News Board

StrongSwan – IPsec VPN for Linux, Android, FreeBSD, Mac OS X, Windows

#1

Post by spaceboy » Wed, Feb 15, 2017, 2:17 PM UTC

StrongSwan – IPsec VPN for Linux, Android, FreeBSD, Mac OS X, Windows
strongswan.org

Re: StrongSwan – IPsec VPN for Linux, Android, FreeBSD, Mac OS X, Windows

#2

Post by baby » Wed, Feb 15, 2017, 5:15 PM UTC

With the 4000 LOC Wireguard https://www.wireguard.io/

what are the incentives to continue using IPsec or Strongswan?

Re: StrongSwan – IPsec VPN for Linux, Android, FreeBSD, Mac OS X, Windows

#3

Post by drdaeman » Wed, Feb 15, 2017, 5:19 PM UTC

baby wrote: post #2

With the 4000 LOC Wireguard https://www.wireguard.io/ what are the incentives to continue using IPsec or Strongswan?

Because IPSec is natively supported by many OSes out-of-box, while Wireguard doesn't seem to have even third-party packages for many systems?

Re: StrongSwan – IPsec VPN for Linux, Android, FreeBSD, Mac OS X, Windows

#4

Post by JustSomeNobody » Wed, Feb 15, 2017, 5:24 PM UTC

baby wrote: post #2

With the 4000 LOC Wireguard https://www.wireguard.io/ what are the incentives to continue using IPsec or Strongswan?

Can you clarify the point about the LOC? I don't understand why that would matter.

Oh, and where is Wireguard supported out of the box like IPsec is?

Re: StrongSwan – IPsec VPN for Linux, Android, FreeBSD, Mac OS X, Windows

#5

Post by baby » Wed, Feb 15, 2017, 5:27 PM UTC

JustSomeNobody wrote: post #4

baby wrote: post #2

With the 4000 LOC Wireguard https://www.wireguard.io/ what are the incentives to continue using IPsec or Strongswan?

Can you clarify the point about the LOC? I don't understand why that would matter. Oh, and where is Wireguard supported out of the box like IPsec is?

https://twitter.com/lyon01_david/status/827918656562720769

Re: StrongSwan – IPsec VPN for Linux, Android, FreeBSD, Mac OS X, Windows

#6

Post by baby » Wed, Feb 15, 2017, 5:27 PM UTC

drdaeman wrote: post #3

baby wrote: post #2

With the 4000 LOC Wireguard https://www.wireguard.io/ what are the incentives to continue using IPsec or Strongswan?

Because IPSec is natively supported by many OSes out-of-box, while Wireguard doesn't seem to have even third-party packages for many systems?

Sure, but if you care about security you won't mind installing it.

Re: StrongSwan – IPsec VPN for Linux, Android, FreeBSD, Mac OS X, Windows

#7

Post by dkhenry » Wed, Feb 15, 2017, 5:28 PM UTC

When I was looking to replace my OpenVPN server for a cloud based VPN one thing I wanted was to use the OS native VPN solution. Everything pointed me to L2TP/IPSec, I am wondering why I would choose IKEv2 over that.

Re: StrongSwan – IPsec VPN for Linux, Android, FreeBSD, Mac OS X, Windows

#8

Post by JustSomeNobody » Wed, Feb 15, 2017, 5:30 PM UTC

baby wrote: post #5

JustSomeNobody wrote: post #4

Earlier quoted context omitted.

Can you clarify the point about the LOC? I don't understand why that would matter. Oh, and where is Wireguard supported out of the box like IPsec is?

https://twitter.com/lyon01_david/status/827918656562720769

So, less code automagically makes it better. Ok.

Re: StrongSwan – IPsec VPN for Linux, Android, FreeBSD, Mac OS X, Windows

#9

Post by cthalupa » Wed, Feb 15, 2017, 5:31 PM UTC

baby wrote: post #2

With the 4000 LOC Wireguard https://www.wireguard.io/ what are the incentives to continue using IPsec or Strongswan?

Because I need something that is natively supported on phones and can be set to 'always on' on managed iOS devices.

Re: StrongSwan – IPsec VPN for Linux, Android, FreeBSD, Mac OS X, Windows

#10

Post by JustSomeNobody » Wed, Feb 15, 2017, 5:31 PM UTC

baby wrote: post #6

drdaeman wrote: post #3

Earlier quoted context omitted.

Because IPSec is natively supported by many OSes out-of-box, while Wireguard doesn't seem to have even third-party packages for many systems?

Sure, but if you care about security you won't mind installing it.

I don't see an iOS client.