Main Page: Difference between revisions
Jump to navigation
Jump to search
No edit summary |
(More reorg, add building) |
||
(16 intermediate revisions by 5 users not shown) | |||
Line 24: | Line 24: | ||
* [[ HOWTO: Unauthenticated Opportunistic IPsec ]] | * [[ HOWTO: Unauthenticated Opportunistic IPsec ]] | ||
* [[ HOWTO: Opportunistic IPsec using LetsEncrypt ]] | * [[ HOWTO: Opportunistic IPsec using LetsEncrypt ]] | ||
* [[ HOWTO: OpenShift cloud encryption using Opportunistic IPsec ]] | <!-- * [[ HOWTO: OpenShift cloud encryption using Opportunistic IPsec ]] --> | ||
* [https://docs.openshift.com/container-platform/3.3/admin_guide/ipsec.html OpenShift Cloud Encryption with libreswan ] written by Openshift | * [https://docs.openshift.com/container-platform/3.3/admin_guide/ipsec.html OpenShift Cloud Encryption with libreswan] written by Openshift | ||
* [https://aws.amazon.com/quickstart/architecture/libreswan-ipsec-mesh/ HOWTO: Opportunistic IPsec mesh for Amazon EC2 instances on AWS ] written by Amazon | * [https://aws.amazon.com/quickstart/architecture/libreswan-ipsec-mesh/ HOWTO: Opportunistic IPsec mesh for Amazon EC2 instances on AWS] written by Amazon | ||
* [[ Route-based VPN using VTI | HOWTO: Route-based VPN using VTI ]] | * [[ Route-based VPN using VTI | HOWTO: Route-based VPN using VTI ]] | ||
* [[ Route-based_XFRMi | HOWTO: Route-based XFRMi ]] | |||
* [[ Benchmarking and Performance testing ]] | * [[ Benchmarking and Performance testing ]] | ||
Line 41: | Line 42: | ||
* [https://devconf.cz/ DevConf.cz] 2016, Presentation by Paul Wouters: [[:File:DevConf2016-IPsec.pdf|Slides]] and [http://www.youtube.com/watch?v=9v-fNwlwlQs&t=42m35s Video] (video starts around 45 minute mark) | * [https://devconf.cz/ DevConf.cz] 2016, Presentation by Paul Wouters: [[:File:DevConf2016-IPsec.pdf|Slides]] and [http://www.youtube.com/watch?v=9v-fNwlwlQs&t=42m35s Video] (video starts around 45 minute mark) | ||
* [http://events.linuxfoundation.org/events/linux-security-summit Linux Security Summit] | * [http://events.linuxfoundation.org/events/linux-security-summit Linux Security Summit] 2016, Presentation by Paul Wouters: [https://www.youtube.com/watch?v=Me_rl6N1m7c&list=PLbzoR-pLrL6pq6qCHZUuhbXsTsyz1N1c0&index=17 Video] | ||
* [https://workshop.linux-ipsec.org/2018/ Linux IPsec Workshop] 2018, Presentation by Paul Wouters: [[:File:IPsecSummit201803.pdf|Slides]] | * [https://workshop.linux-ipsec.org/2018/ Linux IPsec Workshop] 2018, Presentation by Paul Wouters: [[:File:IPsecSummit201803.pdf|Slides]] | ||
* [https://netdevconf.org/0x12/session.html?ipsecike-tutoriallab NetDev 0x12 2018 IKE tutorial] Using IKE and libreswan Presentation by Paul Wouters [[:File:NetDev-0x12-IPsec.pdf|IKE Slides]] | * [https://netdevconf.org/0x12/session.html?ipsecike-tutoriallab NetDev 0x12 2018 IKE tutorial] Using IKE and libreswan Presentation by Paul Wouters [[:File:NetDev-0x12-IPsec.pdf|IKE Slides]] | ||
* [https://netdevconf.org/0x12/session.html?ipsecike-tutoriallab NetDev 0x12 2018 IPsec tutorial] IPsec kernel flow Presentation by Sowmini Varadhan [[:File:netdev-0x12-ipsec-flow.pdf|IPsec Slides]] | * [https://netdevconf.org/0x12/session.html?ipsecike-tutoriallab NetDev 0x12 2018 IPsec tutorial] IPsec kernel flow Presentation by Sowmini Varadhan [[:File:netdev-0x12-ipsec-flow.pdf|IPsec Slides]] | ||
* [https://www.youtube.com/watch?v=7oldcYljp4U NetDev 0x12 2018 IKE and IPsec tutorial video] | * [https://www.youtube.com/watch?v=7oldcYljp4U NetDev 0x12 2018 IKE and IPsec tutorial video] | ||
* [https://devconf.cz Devconf.cz] 2020, Large scale IPsec deployments by Paul Wouters: [[:File:DevConf2020IPsecLargeScale.pdf|Slides]] | |||
== Developer documentation == | == Developer documentation == | ||
=== Building === | |||
* [[ Building and installing from source ]] | * [[ Building and installing from source ]] | ||
* [[ Cross Compiling ]] | * [[ Cross Compiling ]] | ||
* [[ | * [[ Compiling with AddressSanitizer ]] | ||
* [ | * [[ Travis ]] | ||
=== Testing === | |||
{| | |||
* [[ Test Suite | Test Suite - Overview ]] | |||
* [[ Test Suite - KVM ]] | * [[ Test Suite - KVM ]] | ||
* [[ Test Suite - Namespace ]] | * [[ Test Suite - Namespace ]] | ||
* [[ Test Suite - Docker ]] | * [[ Test Suite - Docker ]] | ||
Line 62: | Line 68: | ||
* [[ Test Suite - valgrind ]] | * [[ Test Suite - valgrind ]] | ||
* [[ Test Suite - 2017 NG ]] | * [[ Test Suite - 2017 NG ]] | ||
* [[ Coverity ]] | |||
|} | |||
=== Other === | |||
{| | |||
* [[ Setting up system for debug logging ]] | |||
* [https://bugs.libreswan.org/ Bug Tracker] | |||
* [[ pluto internals ]] | * [[ pluto internals ]] | ||
* [[ KLIPS ]] | * [[ KLIPS ]] | ||
Line 69: | Line 83: | ||
* [[ IKEv2 CP and EAP support ]] | * [[ IKEv2 CP and EAP support ]] | ||
* [[ Discouraged or forbidden C functions ]] | * [[ Discouraged or forbidden C functions ]] | ||
* [[ Distribution source repository ]] | * [[ Distribution source repository ]] | ||
* [[ Linux IPsec Summit 2018 wishlist ]] | |||
* [[ Hacking NSS ]] | |||
=== Summer of Code === | |||
* [[ Student projects ]] | * [[ Student projects ]] | ||
* [[ | * [[GSoC|Google Summer of Code]] (GSoC) | ||
* [[GSoD|Google Season of Documentation]] (GSoD) | |||
* | |||
The Libreswan Team at IETF90 in Toronto | The Libreswan Team at IETF90 in Toronto | ||
Line 82: | Line 99: | ||
|} | |} | ||
The Libreswan developers can be reached on the [https://lists.libreswan.org/mailman/listinfo/swan-dev swan-dev] mailing list or via IRC on the # | The Libreswan developers can be reached on the [https://lists.libreswan.org/mailman/listinfo/swan-dev swan-dev] mailing list or via IRC on the #libreswan channel at the Libera.Chat IRC network. | ||
== Other == | == Other == | ||
* [[ History ]] | * [[ History ]] | ||
* [[ Administrivia ]] | <!-- * [[ Administrivia ]] --> | ||
* [[ Other links ]] | * [[ Other links ]] | ||
* [[ License of work inside the wiki ]] | * [[ License of work inside the wiki ]] |
Latest revision as of 18:26, 9 December 2021
The Libreswan Project
User Documentation
- Introduction
- Configuration examples
- Manual pages
- Additional ipsec.conf documentation
- Interoperability
- FAQ
- Tips and Tricks
- Cipher suites and algorithm support
- Hardware Tokens
- IRC
Upgrading Documentation
Cloud and mesh deployments
- HOWTO: Opportunistic IPsec
- HOWTO: Unauthenticated Opportunistic IPsec
- HOWTO: Opportunistic IPsec using LetsEncrypt
- OpenShift Cloud Encryption with libreswan written by Openshift
- HOWTO: Opportunistic IPsec mesh for Amazon EC2 instances on AWS written by Amazon
- HOWTO: Route-based VPN using VTI
- HOWTO: Route-based XFRMi
Upgrade Information
Presentations
- DevConf.cz 2016, Presentation by Paul Wouters: Slides and Video (video starts around 45 minute mark)
- Linux Security Summit 2016, Presentation by Paul Wouters: Video
- Linux IPsec Workshop 2018, Presentation by Paul Wouters: Slides
- NetDev 0x12 2018 IKE tutorial Using IKE and libreswan Presentation by Paul Wouters IKE Slides
- NetDev 0x12 2018 IPsec tutorial IPsec kernel flow Presentation by Sowmini Varadhan IPsec Slides
- NetDev 0x12 2018 IKE and IPsec tutorial video
- Devconf.cz 2020, Large scale IPsec deployments by Paul Wouters: Slides
Developer documentation
Building
Testing
- Test Suite - Overview
- Test Suite - KVM
- Test Suite - Namespace
- Test Suite - Docker
- Test Suite - Performance
- Test Suite - valgrind
- Test Suite - 2017 NG
- Coverity
Other
- Setting up system for debug logging
- Bug Tracker
- pluto internals
- KLIPS
- Meetings
- RFC List
- IKEv2 Child SA
- IKEv2 CP and EAP support
- Discouraged or forbidden C functions
- Distribution source repository
- Linux IPsec Summit 2018 wishlist
- Hacking NSS
Summer of Code
The Libreswan Team at IETF90 in Toronto
Antony, Tuomo, Kim, Richard, Hugh, Matt and Paul
The Libreswan developers can be reached on the swan-dev mailing list or via IRC on the #libreswan channel at the Libera.Chat IRC network.