4 ms·
IPSec is indeed hell with NATs, and an SSL VPN would be much better. But UDP is even better - most NATs do a good job with UDP too, and if done right, it's pos
by agwa 12y ago
IPSec is indeed hell with NATs, and an SSL VPN would be much better. But UDP is even better - most NATs do a good job with UDP too, and if done right, it's possible to switch Internet connections without the VPN having to reconnect.
- mordechai9000 12y agoDTLS is a standard protocol for TLS over UDP. It is used by existing commercial products, such as Cisco Anyconnect.
- eps 12y agoThe hell are you fellas smoking? IPsec NAT traversal has been a non-issue since it was standardized about 10 years ago.