User Tools

Site Tools


strongswan_-_lessons_learned

This is an old revision of the document!


strongSwan IPsec lessons learned

  • Compression limits the throughput to about 100 Mbps
  • Disable farp plugin when using 0.0.0.0/0 remote traffic selector
  • Enable Charon make before break if using auto=route
  • Enable keyingtries=%forever and set Charon retry_initiate_interval nonzero for always up tunnels with auto=route
strongswan_-_lessons_learned.1554102388.txt.gz · Last modified: 2019/04/01 10:06 by cbredi