Page MenuHomeVyOS Platform
Create Task
Maniphest T1441

Add support for IPSec XFRM interfaces
Closed, ResolvedPublicFEATURE REQUEST
Actions

Description

This seems to be a solution for VTI interfaces not supporting IPv6. (or IPv4 on vti6 interfaces)

https://wiki.strongswan.org/projects/strongswan/wiki/RouteBasedVPN#XFRM-Interfaces-on-Linux
https://lwn.net/Articles/757391/
https://wiki.strongswan.org/issues/2845

I currently have vti tunnels to multiple sites. Each site has an additional sit tunnel within the vti tunnel for ipv6 support. It would be very nice to get rid of that overhead.

Details

Difficulty level
Easy (less than an hour)
Version
-
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Perfectly compatible

Related Objects

Event Timeline

mb300sd created this task.Jun 16 2019, 10:07 PM
pasik added a subscriber: pasik.Jun 18 2019, 8:27 AM
syncer assigned this task to zsdc.Aug 31 2019, 12:09 AM
syncer triaged this task as Wishlist priority.
syncer edited projects, added VyOS 1.3 Equuleus; removed VyOS 1.2 Crux.
dmbaturin merged a task: T2540: Support XFRM interfaces for route based IPSEC.Aug 20 2020, 4:01 PM
dmbaturin added a subscriber: csszep.
Dickins added a subscriber: Dickins.May 3 2021, 8:08 PM
c-po closed this task as Resolved.Jun 29 2021, 4:38 PM
c-po claimed this task.
c-po edited projects, added VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
c-po changed Difficulty level from Unknown (require assessment) to Easy (less than an hour).
c-po set Is it a breaking change? to Perfectly compatible.
c-po added a subscriber: zsdc.
syncer moved this task from Need Triage to Finished on the VyOS 1.4 Sagitta board.Jul 20 2021, 3:51 PM