This archive is retained to ensure existing URLs remain functional. It will not contain any emails sent to this mailing list after July 1, 2024. For all messages, including those sent before and after this date, please visit the new location of the archive at https://mailman.ripe.net/archives/list/[email protected]/

[ipv6-wg] IPv6 ipsec tunnel server on linux server

• Previous message (by thread): [ipv6-wg] IPv6 ipsec tunnel server on linux server
• Next message (by thread): [ipv6-wg] New on RIPE Labs: 10 Years of IPv6 Stakeout!

Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Thomas Schäfer thomas at cis.uni-muenchen.de
Tue Nov 6 23:26:56 CET 2018

Hi,

May be my  last comment on that topic. Everything with UDP und ipsec leads to 
RFC 3948, the workaround for IPv4 and NAT.
But for some reasons esp-pakets are also blocked by some ISP via IPv6.
One of the questions was if linux supports udp encapsulation.  I am not sure, 
if my thoughts complete nonsense. 

https://people.netfilter.org/pablo/netdev0.1/papers/UDP-Encapsulation-in-Linux.pdf
https://www.netdevconf.org/0.1/docs/herbert-UDP-Encapsulation-Linux.pdf

may also useful for ipsec(ESP/AH) over udp over ipv6. 
If only used in manual configurations or also automated with free/libre/
strongSwan-forks. I don't know.



Regards,
Thomas

• Previous message (by thread): [ipv6-wg] IPv6 ipsec tunnel server on linux server
• Next message (by thread): [ipv6-wg] New on RIPE Labs: 10 Years of IPv6 Stakeout!

Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

[ ipv6-wg Archives ]