Main Page: Difference between revisions
Jump to navigation
Jump to search
Paul Wouters (talk | contribs) No edit summary |
(More reorg, add building) |
||
| (30 intermediate revisions by 5 users not shown) | |||
| Line 3: | Line 3: | ||
== User Documentation == | == User Documentation == | ||
* [[ | * [[ Introduction ]] | ||
* [[ | * [[ Configuration examples ]] | ||
* [https://libreswan.org/man/ Manual pages] | * [https://libreswan.org/man/ Manual pages] | ||
* [[ | * [[ Additional ipsec.conf documentation ]] | ||
* [[ | * [[ Interoperability ]] | ||
* [[ FAQ ]] | * [[ FAQ ]] | ||
* [[ Tips and Tricks ]] | * [[ Tips and Tricks ]] | ||
* [[ Cipher suites and algorithm support ]] | * [[ Cipher suites and algorithm support ]] | ||
* [[ Hardware Tokens ]] | * [[ Hardware Tokens ]] | ||
* [[ IRC ]] | |||
=== Upgrading Documentation === | === Upgrading Documentation === | ||
| Line 23: | Line 24: | ||
* [[ HOWTO: Unauthenticated Opportunistic IPsec ]] | * [[ HOWTO: Unauthenticated Opportunistic IPsec ]] | ||
* [[ HOWTO: Opportunistic IPsec using LetsEncrypt ]] | * [[ HOWTO: Opportunistic IPsec using LetsEncrypt ]] | ||
* [[ HOWTO: OpenShift cloud encryption using Opportunistic IPsec ]] | <!-- * [[ HOWTO: OpenShift cloud encryption using Opportunistic IPsec ]] --> | ||
* [https://docs.openshift.com/container-platform/3.3/admin_guide/ipsec.html OpenShift Cloud Encryption with libreswan ] | * [https://docs.openshift.com/container-platform/3.3/admin_guide/ipsec.html OpenShift Cloud Encryption with libreswan] written by Openshift | ||
* [https://aws.amazon.com/quickstart/architecture/libreswan-ipsec-mesh/ HOWTO: Opportunistic IPsec mesh for Amazon EC2 instances on AWS] written by Amazon | |||
* [[ Route-based VPN using VTI | HOWTO: Route-based VPN using VTI ]] | * [[ Route-based VPN using VTI | HOWTO: Route-based VPN using VTI ]] | ||
* [[ Route-based_XFRMi | HOWTO: Route-based XFRMi ]] | |||
* [[ Benchmarking and Performance testing ]] | * [[ Benchmarking and Performance testing ]] | ||
| Line 38: | Line 41: | ||
== Presentations == | == Presentations == | ||
* [https://devconf.cz/ DevConf.cz] 2016 Presentation by Paul Wouters | * [https://devconf.cz/ DevConf.cz] 2016, Presentation by Paul Wouters: [[:File:DevConf2016-IPsec.pdf|Slides]] and [http://www.youtube.com/watch?v=9v-fNwlwlQs&t=42m35s Video] (video starts around 45 minute mark) | ||
* [http://events.linuxfoundation.org/events/linux-security-summit Linux | * [http://events.linuxfoundation.org/events/linux-security-summit Linux Security Summit] 2016, Presentation by Paul Wouters: [https://www.youtube.com/watch?v=Me_rl6N1m7c&list=PLbzoR-pLrL6pq6qCHZUuhbXsTsyz1N1c0&index=17 Video] | ||
* [https://workshop.linux-ipsec.org/2018/ Linux IPsec Workshop] 2018, Presentation by Paul Wouters: [[:File:IPsecSummit201803.pdf|Slides]] | |||
* [https://netdevconf.org/0x12/session.html?ipsecike-tutoriallab NetDev 0x12 2018 IKE tutorial] Using IKE and libreswan Presentation by Paul Wouters [[:File:NetDev-0x12-IPsec.pdf|IKE Slides]] | |||
* [https://netdevconf.org/0x12/session.html?ipsecike-tutoriallab NetDev 0x12 2018 IPsec tutorial] IPsec kernel flow Presentation by Sowmini Varadhan [[:File:netdev-0x12-ipsec-flow.pdf|IPsec Slides]] | |||
* [https://www.youtube.com/watch?v=7oldcYljp4U NetDev 0x12 2018 IKE and IPsec tutorial video] | |||
* [https://devconf.cz Devconf.cz] 2020, Large scale IPsec deployments by Paul Wouters: [[:File:DevConf2020IPsecLargeScale.pdf|Slides]] | |||
== Developer documentation == | == Developer documentation == | ||
=== Building === | |||
* [[ Building and installing from source ]] | * [[ Building and installing from source ]] | ||
* [[ Cross Compiling ]] | * [[ Cross Compiling ]] | ||
* [[ Compiling with AddressSanitizer ]] | |||
* [[ Travis ]] | |||
=== Testing === | |||
{| | |||
* [[ Test Suite | Test Suite - Overview ]] | |||
* [[ Test Suite - KVM ]] | |||
* [[ Test Suite - Namespace ]] | |||
* [[ Test Suite - Docker ]] | |||
* [[ Test Suite - Performance ]] | |||
* [[ Test Suite - valgrind ]] | |||
* [[ Test Suite - 2017 NG ]] | |||
* [[ Coverity ]] | |||
|} | |||
=== Other === | |||
{| | |||
* [[ Setting up system for debug logging ]] | * [[ Setting up system for debug logging ]] | ||
* [https://bugs.libreswan.org/ Bug Tracker] | * [https://bugs.libreswan.org/ Bug Tracker] | ||
* [[ pluto internals ]] | * [[ pluto internals ]] | ||
* [[ KLIPS ]] | * [[ KLIPS ]] | ||
| Line 60: | Line 83: | ||
* [[ IKEv2 CP and EAP support ]] | * [[ IKEv2 CP and EAP support ]] | ||
* [[ Discouraged or forbidden C functions ]] | * [[ Discouraged or forbidden C functions ]] | ||
* [[ Distribution source repository ]] | * [[ Distribution source repository ]] | ||
* [[ Linux IPsec Summit 2018 wishlist ]] | |||
* [[ Hacking NSS ]] | |||
=== Summer of Code === | |||
* [[ Student projects ]] | * [[ Student projects ]] | ||
* Google Summer of Code | * [[GSoC|Google Summer of Code]] (GSoC) | ||
* [[GSoD|Google Season of Documentation]] (GSoD) | |||
The Libreswan Team at IETF90 in Toronto | The Libreswan Team at IETF90 in Toronto | ||
| Line 71: | Line 99: | ||
|} | |} | ||
The Libreswan developers can be reached on the [https://lists.libreswan.org/mailman/listinfo/swan-dev swan-dev] mailing list or via IRC on the # | The Libreswan developers can be reached on the [https://lists.libreswan.org/mailman/listinfo/swan-dev swan-dev] mailing list or via IRC on the #libreswan channel at the Libera.Chat IRC network. | ||
== Other == | == Other == | ||
* [[ History ]] | * [[ History ]] | ||
* [[ Administrivia ]] | <!-- * [[ Administrivia ]] --> | ||
* [[ Other links ]] | * [[ Other links ]] | ||
* [[ License of work inside the wiki ]] | |||
Latest revision as of 19:26, 9 December 2021
The Libreswan Project
User Documentation
- Introduction
- Configuration examples
- Manual pages
- Additional ipsec.conf documentation
- Interoperability
- FAQ
- Tips and Tricks
- Cipher suites and algorithm support
- Hardware Tokens
- IRC
Upgrading Documentation
Cloud and mesh deployments
- HOWTO: Opportunistic IPsec
- HOWTO: Unauthenticated Opportunistic IPsec
- HOWTO: Opportunistic IPsec using LetsEncrypt
- OpenShift Cloud Encryption with libreswan written by Openshift
- HOWTO: Opportunistic IPsec mesh for Amazon EC2 instances on AWS written by Amazon
- HOWTO: Route-based VPN using VTI
- HOWTO: Route-based XFRMi
Upgrade Information
Presentations
- DevConf.cz 2016, Presentation by Paul Wouters: Slides and Video (video starts around 45 minute mark)
- Linux Security Summit 2016, Presentation by Paul Wouters: Video
- Linux IPsec Workshop 2018, Presentation by Paul Wouters: Slides
- NetDev 0x12 2018 IKE tutorial Using IKE and libreswan Presentation by Paul Wouters IKE Slides
- NetDev 0x12 2018 IPsec tutorial IPsec kernel flow Presentation by Sowmini Varadhan IPsec Slides
- NetDev 0x12 2018 IKE and IPsec tutorial video
- Devconf.cz 2020, Large scale IPsec deployments by Paul Wouters: Slides
Developer documentation
Building
Testing
- Test Suite - Overview
- Test Suite - KVM
- Test Suite - Namespace
- Test Suite - Docker
- Test Suite - Performance
- Test Suite - valgrind
- Test Suite - 2017 NG
- Coverity
Other
- Setting up system for debug logging
- Bug Tracker
- pluto internals
- KLIPS
- Meetings
- RFC List
- IKEv2 Child SA
- IKEv2 CP and EAP support
- Discouraged or forbidden C functions
- Distribution source repository
- Linux IPsec Summit 2018 wishlist
- Hacking NSS
Summer of Code
The Libreswan Team at IETF90 in Toronto
Antony, Tuomo, Kim, Richard, Hugh, Matt and Paul
The Libreswan developers can be reached on the swan-dev mailing list or via IRC on the #libreswan channel at the Libera.Chat IRC network.