Main Page

The Libreswan Project

User Documentation

• Introduction
• Configuration examples
• Manual pages
• Additional ipsec.conf documentation
• Interoperability
• FAQ
• Tips and Tricks
• Cipher suites and algorithm support
• Hardware Tokens
• IRC

Upgrading Documentation

• HOWTO: Using NSS with libreswan
• HOWTO: openswan to libreswan migration

Cloud and mesh deployments

• HOWTO: Opportunistic IPsec
• HOWTO: Unauthenticated Opportunistic IPsec
• HOWTO: Opportunistic IPsec using LetsEncrypt
• HOWTO: OpenShift cloud encryption using Opportunistic IPsec
• OpenShift Cloud Encryption with libreswan written by Openshift
• HOWTO: Opportunistic IPsec mesh for Amazon EC2 instances on AWS written by Amazon
• HOWTO: Route-based VPN using VTI

• Benchmarking and Performance testing
• OCF Hardware crypto acceleration
• Entropy matters

Upgrade Information

• 3.14 X509
• 3.14 on Debian Wheezy
• 3.21 on Debian Wheezy

Presentations

• DevConf.cz 2016, Presentation by Paul Wouters: Slides and Video (video starts around 45 minute mark)
• Linux Security Summit 2017, Presentation by Paul Wouters: Slides and Video
• Linux IPsec Workshop 2018, Presentation by Paul Wouters: Slides
• NetDev 0x12 2018 IKE tutorial Using IKE and libreswan Presentation by Paul Wouters IKE Slides
• NetDev 0x12 2018 IPsec tutorial IPsec kernel flow Presentation by Sowmini Varadhan IPsec Slides
• NetDev 0x12 2018 IKE and IPsec tutorial video

Developer documentation

Building and installing from source Cross Compiling Setting up system for debug logging Bug Tracker Test Suite - KVM using swantest Test Suite - Namespace Test Suite - Docker Test Suite - Performance Test Suite - valgrind Test Suite - 2017 NG pluto internals KLIPS Meetings RFC List IKEv2 Child SA IKEv2 CP and EAP support Discouraged or forbidden C functions Compiling with AddressSanitizer Distribution source repository Student projects Linux IPsec Summit 2018 wishlist Google Summer of Code 2018: GSoC2018 IKEv2 Protocol details ikev2details The Libreswan Team at IETF90 in Toronto Antony, Tuomo, Kim, Richard, Hugh, Matt and Paul

The Libreswan developers can be reached on the swan-dev mailing list or via IRC on the #swan channel at the FreeNode IRC network.

Other

• History
• Administrivia
• Other links
• License of work inside the wiki