Main Page

The Libreswan Project

User Documentation

• Introduction
• Configuration examples
• Manual pages
• Additional ipsec.conf documentation
• Interoperability
• FAQ
• Tips and Tricks
• Cipher suites and algorithm support
• Hardware Tokens
• IRC

Upgrading Documentation

• HOWTO: Using NSS with libreswan
• HOWTO: openswan to libreswan migration

Cloud and mesh deployments

• HOWTO: Opportunistic IPsec
• HOWTO: Unauthenticated Opportunistic IPsec
• HOWTO: Opportunistic IPsec using LetsEncrypt
• OpenShift Cloud Encryption with libreswan written by Openshift
• HOWTO: Opportunistic IPsec mesh for Amazon EC2 instances on AWS written by Amazon
• HOWTO: Route-based VPN using VTI
• HOWTO: Route-based XFRMi

• Benchmarking and Performance testing
• OCF Hardware crypto acceleration
• Entropy matters

Upgrade Information

• 3.14 X509
• 3.14 on Debian Wheezy
• 3.21 on Debian Wheezy

Presentations

• DevConf.cz 2016, Presentation by Paul Wouters: Slides and Video (video starts around 45 minute mark)
• Linux Security Summit 2016, Presentation by Paul Wouters: Video
• Linux IPsec Workshop 2018, Presentation by Paul Wouters: Slides
• NetDev 0x12 2018 IKE tutorial Using IKE and libreswan Presentation by Paul Wouters IKE Slides
• NetDev 0x12 2018 IPsec tutorial IPsec kernel flow Presentation by Sowmini Varadhan IPsec Slides
• NetDev 0x12 2018 IKE and IPsec tutorial video
• Devconf.cz 2020, Large scale IPsec deployments by Paul Wouters: Slides

Developer documentation

Testing

• Test Suite - KVM
• Test Suite - Namespace
• Test Suite - Docker
• Test Suite - Performance
• Test Suite - valgrind
• Test Suite - 2017 NG

Other

Building and installing from source Cross Compiling Setting up system for debug logging Bug Tracker pluto internals KLIPS Meetings RFC List IKEv2 Child SA IKEv2 CP and EAP support Discouraged or forbidden C functions Compiling with AddressSanitizer Distribution source repository Linux IPsec Summit 2018 wishlist Hacking NSS Summer of Code Student projects Google Summer of Code (GSoC) Google Season of Documentation (GSoD) The Libreswan Team at IETF90 in Toronto Antony, Tuomo, Kim, Richard, Hugh, Matt and Paul

The Libreswan developers can be reached on the swan-dev mailing list or via IRC on the #libreswan channel at the Libera.Chat IRC network.

Other

• History
• Other links
• License of work inside the wiki