What it does
strongSwan implements IKE protocols for route-based and policy-based IPsec VPNs, with certificate, pre-shared-key and extensible authentication options.
strongSwan is a fit when your network design already calls for IPsec. The project supports policy-based and route-based scenarios, with authentication ranging from certificates and pre-shared keys to pluggable enterprise methods. Its modular approach lets an administrator choose the integrations required by the deployment.
The official page also describes smart-card and TPM-backed credential options. Start with the IKEv2 and authentication configuration that matches your clients, rather than enabling every available plugin. The GPLv2 source and commercial licensing options are both identified on the project site.
Strengths
- Modular authentication and credential support
- Route-based and policy-based IPsec scenarios
Best for
- Administrators deploying IPsec and IKEv2 networks