4 ms·
IPSec IKEv2. Look Ma, no apps! Native MacOS client.
by nuker 6y ago
IPSec IKEv2. Look Ma, no apps! Native MacOS client.
- tptacek 6y agoI would rather use a VPN client written in Perl than rely on macOS IPSEC support for anything, let alone have to configure the serverside for it.
- nuker 6y agoAny specific bugs?
- fmajid 6y agoIPsec on Apple devices works very well once it's running, even if debugging tools are abysmal for getting to that point. If it helps, I have a shell-script to auto-setup an IPsec/IKEv2/MOBIKE and WireGuard VPN on top of an OpenBSD machine, including in the cloud: https://github.com/fazalmajid/edgewalker/ https://github.com/fazalmajid/edgewalker/
- tptacek 6y agoPart of the point of running WireGuard is never having to expose IPSEC code to your adversaries, so I don't really see the appeal of something that sets up both WireGuard and a bunch of IKE stuff.
- nuker 6y agoYea, OpenBSD iked is not Strongswan, its a new code. Much smaller and secure, not all features supported yet though, like redirect.