User Tools

Site Tools


strongSwan IPsec lessons learned

  • Compression limits the throughput to about 100 Mbps
  • Disable farp plugin when using remote traffic selector
  • Enable Charon make before break if using auto=route
  • Enable keyingtries=%forever and set Charon retry_initiate_interval nonzero for always up tunnels with auto=route
  • Set retry_initiate_interval to nonzero if DNS resolution is in use
strongswan_-_lessons_learned.txt · Last modified: 2020/02/27 05:55 by cbredi