Main Page: Difference between revisions
Jump to navigation
Jump to search
Tuomo Soini (talk | contribs) No edit summary |
(More reorg, add building) |
||
(107 intermediate revisions by 7 users not shown) | |||
Line 1: | Line 1: | ||
'''The Libreswan Project''' | '''The Libreswan Project''' | ||
== User Documentation == | |||
* [[ | * [[ Introduction ]] | ||
* [[ Configuration examples ]] | |||
* [https://libreswan.org/man/ Manual pages] | |||
* [[ Additional ipsec.conf documentation ]] | |||
* [[ Interoperability ]] | |||
* [[ FAQ ]] | |||
* [[ Tips and Tricks ]] | |||
* [[ Cipher suites and algorithm support ]] | |||
* [[ Hardware Tokens ]] | |||
* [[ IRC ]] | |||
=== Upgrading Documentation === | |||
* [[ HOWTO: Using NSS with libreswan ]] | |||
* [[ HOWTO: openswan to libreswan migration ]] | |||
=== Cloud and mesh deployments === | |||
* [[ HOWTO: Opportunistic IPsec ]] | |||
* [[ HOWTO: Unauthenticated Opportunistic IPsec ]] | |||
* [[ HOWTO: Opportunistic IPsec using LetsEncrypt ]] | |||
<!-- * [[ HOWTO: OpenShift cloud encryption using Opportunistic IPsec ]] --> | |||
* [https://docs.openshift.com/container-platform/3.3/admin_guide/ipsec.html OpenShift Cloud Encryption with libreswan] written by Openshift | |||
* [https://aws.amazon.com/quickstart/architecture/libreswan-ipsec-mesh/ HOWTO: Opportunistic IPsec mesh for Amazon EC2 instances on AWS] written by Amazon | |||
* [[ Route-based VPN using VTI | HOWTO: Route-based VPN using VTI ]] | |||
* [[ Route-based_XFRMi | HOWTO: Route-based XFRMi ]] | |||
* [[ Benchmarking and Performance testing ]] | |||
* [[ OCF Hardware crypto acceleration ]] | |||
* [[ Entropy matters ]] | |||
'''Upgrade Information''' | |||
* [[ 3.14 X509 ]] | |||
* [[ 3.14 on Debian Wheezy ]] | |||
* [[ 3.21 on Debian Wheezy ]] | |||
== Presentations == | |||
* [https://devconf.cz/ DevConf.cz] 2016, Presentation by Paul Wouters: [[:File:DevConf2016-IPsec.pdf|Slides]] and [http://www.youtube.com/watch?v=9v-fNwlwlQs&t=42m35s Video] (video starts around 45 minute mark) | |||
* [http://events.linuxfoundation.org/events/linux-security-summit Linux Security Summit] 2016, Presentation by Paul Wouters: [https://www.youtube.com/watch?v=Me_rl6N1m7c&list=PLbzoR-pLrL6pq6qCHZUuhbXsTsyz1N1c0&index=17 Video] | |||
* [https://workshop.linux-ipsec.org/2018/ Linux IPsec Workshop] 2018, Presentation by Paul Wouters: [[:File:IPsecSummit201803.pdf|Slides]] | |||
* [https://netdevconf.org/0x12/session.html?ipsecike-tutoriallab NetDev 0x12 2018 IKE tutorial] Using IKE and libreswan Presentation by Paul Wouters [[:File:NetDev-0x12-IPsec.pdf|IKE Slides]] | |||
* [https://netdevconf.org/0x12/session.html?ipsecike-tutoriallab NetDev 0x12 2018 IPsec tutorial] IPsec kernel flow Presentation by Sowmini Varadhan [[:File:netdev-0x12-ipsec-flow.pdf|IPsec Slides]] | |||
* [https://www.youtube.com/watch?v=7oldcYljp4U NetDev 0x12 2018 IKE and IPsec tutorial video] | |||
* [https://devconf.cz Devconf.cz] 2020, Large scale IPsec deployments by Paul Wouters: [[:File:DevConf2020IPsecLargeScale.pdf|Slides]] | |||
== Developer documentation == | |||
=== Building === | |||
* [[ Building and installing from source ]] | |||
* [[ Cross Compiling ]] | |||
* [[ Compiling with AddressSanitizer ]] | |||
* [[ Travis ]] | |||
=== Testing === | |||
{| | |||
* [[ Test Suite | Test Suite - Overview ]] | |||
* [[ Test Suite - KVM ]] | |||
* [[ Test Suite - Namespace ]] | |||
* [[ Test Suite - Docker ]] | |||
* [[ Test Suite - Performance ]] | |||
* [[ Test Suite - valgrind ]] | |||
* [[ Test Suite - 2017 NG ]] | |||
* [[ Coverity ]] | |||
|} | |||
=== Other === | |||
{| | |||
* [[ Setting up system for debug logging ]] | |||
* [https://bugs.libreswan.org/ Bug Tracker] | |||
* [[ pluto internals ]] | |||
* [[ KLIPS ]] | |||
* [[ Meetings ]] | |||
* [[ RFC List ]] | |||
* [[ IKEv2 Child SA ]] | |||
* [[ IKEv2 CP and EAP support ]] | |||
* [[ Discouraged or forbidden C functions ]] | |||
* [[ Distribution source repository ]] | |||
* [[ Linux IPsec Summit 2018 wishlist ]] | |||
* [[ Hacking NSS ]] | |||
=== Summer of Code === | |||
* [[ Student projects ]] | |||
* [[GSoC|Google Summer of Code]] (GSoC) | |||
* [[GSoD|Google Season of Documentation]] (GSoD) | |||
The Libreswan Team at IETF90 in Toronto | |||
[[File:LibreswanToronto2014wiki.jpg|right|400px]] | |||
Antony, Tuomo, Kim, Richard, Hugh, Matt and Paul | |||
|} | |||
The Libreswan developers can be reached on the [https://lists.libreswan.org/mailman/listinfo/swan-dev swan-dev] mailing list or via IRC on the #libreswan channel at the Libera.Chat IRC network. | |||
== Other == | |||
* [[ History ]] | |||
<!-- * [[ Administrivia ]] --> | |||
* [[ Other links ]] | |||
* [[ License of work inside the wiki ]] |
Latest revision as of 18:26, 9 December 2021
The Libreswan Project
User Documentation
- Introduction
- Configuration examples
- Manual pages
- Additional ipsec.conf documentation
- Interoperability
- FAQ
- Tips and Tricks
- Cipher suites and algorithm support
- Hardware Tokens
- IRC
Upgrading Documentation
Cloud and mesh deployments
- HOWTO: Opportunistic IPsec
- HOWTO: Unauthenticated Opportunistic IPsec
- HOWTO: Opportunistic IPsec using LetsEncrypt
- OpenShift Cloud Encryption with libreswan written by Openshift
- HOWTO: Opportunistic IPsec mesh for Amazon EC2 instances on AWS written by Amazon
- HOWTO: Route-based VPN using VTI
- HOWTO: Route-based XFRMi
Upgrade Information
Presentations
- DevConf.cz 2016, Presentation by Paul Wouters: Slides and Video (video starts around 45 minute mark)
- Linux Security Summit 2016, Presentation by Paul Wouters: Video
- Linux IPsec Workshop 2018, Presentation by Paul Wouters: Slides
- NetDev 0x12 2018 IKE tutorial Using IKE and libreswan Presentation by Paul Wouters IKE Slides
- NetDev 0x12 2018 IPsec tutorial IPsec kernel flow Presentation by Sowmini Varadhan IPsec Slides
- NetDev 0x12 2018 IKE and IPsec tutorial video
- Devconf.cz 2020, Large scale IPsec deployments by Paul Wouters: Slides
Developer documentation
Building
Testing
- Test Suite - Overview
- Test Suite - KVM
- Test Suite - Namespace
- Test Suite - Docker
- Test Suite - Performance
- Test Suite - valgrind
- Test Suite - 2017 NG
- Coverity
Other
- Setting up system for debug logging
- Bug Tracker
- pluto internals
- KLIPS
- Meetings
- RFC List
- IKEv2 Child SA
- IKEv2 CP and EAP support
- Discouraged or forbidden C functions
- Distribution source repository
- Linux IPsec Summit 2018 wishlist
- Hacking NSS
Summer of Code
The Libreswan Team at IETF90 in Toronto
Antony, Tuomo, Kim, Richard, Hugh, Matt and Paul
The Libreswan developers can be reached on the swan-dev mailing list or via IRC on the #libreswan channel at the Libera.Chat IRC network.