mirror/setup-ipsec-vpn
1
0
Fork 0
mirror of synced 2024-11-28 23:56:04 +03:00
Code Issues Projects Releases Wiki Activity
1,229 Commits 1 Branch 0 Tags 20 MiB
3dc675ba37
Commit Graph

391 Commits

Author SHA1 Message Date
hwdsl2
68b78879fd Update docs 2022-02-09 22:26:02 -06:00
hwdsl2
df37738677 Update docs 
- Add English translations for the "Google BBR" section, which was
  contributed by @optimusleobear in #1096
- Other minor improvements
 2022-02-09 22:18:12 -06:00
Leo Liu
63133e1de4
Manual for enabling BBR in zh-cn (#1096) 
* Manual for enabling BBR in zh-cn
* Update docs linked to bbr manual
 2022-02-03 23:10:25 -06:00
hwdsl2
2b74dd99a7 Update docs 
- Ref: #1087
 2022-01-26 19:24:37 -06:00
Damir Konkov
0fc1c8f355
Update clients.md (#1087) 
- Step if strongswan service not found was added
 2022-01-26 19:20:31 -06:00
hwdsl2
8992213558 Update docs 2022-01-23 10:45:09 -06:00
hwdsl2
a4e4f45ff6 Update docs 
- Link to released versions of .reg files on GitHub
 2022-01-22 17:11:49 -06:00
hwdsl2
1869cd3cda Update docs 
- Link to released version of ikev2_config_import.cmd on GitHub
 2022-01-22 16:36:10 -06:00
hwdsl2
a5f84d11d1 Update docs 2022-01-22 15:34:38 -06:00
hwdsl2
fa6a84ff98 Update docs 2022-01-18 00:07:35 -06:00
hwdsl2
a88ea14a4b Update docs 2022-01-16 23:05:17 -06:00
hwdsl2
4b891e42bd Update docs 2022-01-15 23:43:15 -06:00
hwdsl2
598eb3e6ec Update docs 2022-01-14 00:25:03 -06:00
hwdsl2
44fede6826 Update docs 2022-01-10 09:27:19 -06:00
hwdsl2
a1a9eb27fc Update docs 2022-01-10 00:06:23 -06:00
hwdsl2
45b1155649 Update docs 2022-01-08 11:30:25 -06:00
hwdsl2
1aae392e48 Update docs 2022-01-02 12:57:55 -06:00
hwdsl2
0bcce9fb61 Update docs 2022-01-02 02:20:53 -06:00
hwdsl2
c78b398057 Update year 2022-01-02 00:09:03 -06:00
hwdsl2
83b7ec0448 Update docs 2021-12-30 16:03:25 -06:00
hwdsl2
b9f662de7b Update docs 2021-12-30 00:02:37 -06:00
hwdsl2
78b3766846 Update docs 
- Ref: #1040
 2021-11-05 23:03:22 -05:00
Damir Konkov
a1179b7f71
Add clarification about routing VPN server IP (#1040) 2021-11-05 22:59:26 -05:00
hwdsl2
0f037b0bf0 Update docs 2021-11-04 08:10:44 -05:00
hwdsl2
3884b35d98 Update docs 
- Update IPsec/L2TP instructions for Windows 11
 2021-11-04 00:09:19 -05:00
hwdsl2
e762e78160 Update IKEv2 docs 
- Update instructions for Windows 11
 2021-11-03 23:02:41 -05:00
hwdsl2
572da3b8d0 Update docs 2021-10-31 23:20:42 -05:00
hwdsl2
3433bc43d0 Update docs 2021-10-26 00:02:28 -05:00
hwdsl2
222536a647 Update docs 2021-10-10 14:31:17 -05:00
hwdsl2
5d73f845fe Update docs 2021-10-09 23:44:25 -05:00
LLZ
c455786b8f
Add alternative download sources for strongSwan Android VPN client (#1032) 2021-10-08 23:41:12 -05:00
hwdsl2
6c7caea39b Update docs 2021-09-28 23:13:45 -05:00
hwdsl2
297f2739b9 Update docs 2021-09-26 22:28:49 -05:00
hwdsl2
96f53133e7 Update docs 2021-09-25 22:52:40 -05:00
hwdsl2
e054d2ca4b Update docs 2021-09-25 08:35:55 -05:00
hwdsl2
3cf567b1e4 Update docs 
- Add instructions for assigning static IPs to IKEv2 clients. Ref: #1003.
- Update port forwarding section
 2021-09-24 23:57:56 -05:00
hwdsl2
340c474197 Update docs 
- Add advanced usage section for forwarding port(s) to VPN clients
 2021-09-23 01:18:06 -05:00
hwdsl2
328e78e9a0 Update docs 2021-09-18 00:20:57 -05:00
hwdsl2
e142a1a854 Update docs 2021-09-11 23:15:32 -05:00
hwdsl2
daf6ec76ae Update docs 2021-09-11 16:41:59 -05:00
hwdsl2
506da59019 Update docs 2021-09-11 15:34:15 -05:00
hwdsl2
8277b21660 Update docs 2021-09-09 01:04:07 -05:00
hwdsl2
6d37cda1a0 Update docs 2021-09-09 00:22:34 -05:00
hwdsl2
e83526e213 Update docs 2021-09-07 02:56:49 -05:00
hwdsl2
da7697a5b0 Cleanup 
- Update scripts to use bash instead of sh
- Update docs
 2021-08-27 23:35:31 -05:00
hwdsl2
742161124c Update docs 2021-08-15 11:38:27 -05:00
hwdsl2
f0b0b9213b Update docs 2021-08-15 00:46:41 -05:00
hwdsl2
6daacff466 Cleanup 2021-08-07 16:12:26 -05:00
hwdsl2
6aa15b8a21 Update docs 2021-07-31 15:32:02 -05:00
hwdsl2
c6cfd1fe49 Update docs 2021-07-28 23:33:29 -05:00
hwdsl2
88ab115874 Update docs 2021-07-27 09:53:25 -05:00
hwdsl2
f18c3c0207 Update docs 2021-07-25 20:55:54 -05:00
hwdsl2
02bdbeb9a2 Update docs 2021-07-24 16:26:20 -05:00
hwdsl2
8db2a9ebd8 Update docs 2021-07-23 01:25:25 -05:00
hwdsl2
b59eb58ac9 Update docs 2021-07-21 01:56:11 -05:00
hwdsl2
02b6d05c82 Update IPTables rules 
- Allow traffic from IKEv2 and IPsec/XAuth ("Cisco IPsec") clients to
  IPsec/L2TP clients. Ref: #983
- Cleanup
- Update docs
 2021-06-20 15:02:33 -05:00
hwdsl2
99dd5702e7 Update docs 2021-06-06 15:27:56 -05:00
hwdsl2
9072c0889c Update docs 2021-06-06 12:04:19 -05:00
hwdsl2
7376fc02d2 Update docs 2021-06-04 17:27:21 -05:00
hwdsl2
e05cdb4b83 Update docs 2021-06-04 14:48:19 -05:00
hwdsl2
d6088751b9 Update docs 2021-06-01 02:31:14 -05:00
hwdsl2
55b468bb1f Update docs 2021-05-24 01:20:32 -05:00
hwdsl2
933114087b Update docs 2021-05-02 00:48:29 -05:00
hwdsl2
ee409250d8 Improve IKEv2 setup 
- Increase RSA key size from the default 2048 bits to 3072 bits
- Use fixed delay between certutil calls, a random delay is not needed
- Update docs
 2021-05-01 14:46:12 -05:00
hwdsl2
21a72d6232 Update docs 2021-04-30 09:42:36 -05:00
hwdsl2
9bd716dda8 Update docs 2021-04-26 22:59:30 -05:00
hwdsl2
5d5bcf6857 Update IKEv2 docs 2021-04-24 22:56:51 -05:00
hwdsl2
740f6d92d0 Update docs 2021-04-24 16:16:29 -05:00
hwdsl2
dc1bcb21f9 Update docs 2021-04-18 14:28:00 -05:00
hwdsl2
6c5e29351f Optimize images 2021-04-16 22:27:49 -05:00
hwdsl2
55aac9ad37 Update IKEv2 docs 2021-04-11 15:44:03 -05:00
hwdsl2
848ff7ba0a Update IKEv2 docs 2021-04-10 16:25:13 -05:00
hwdsl2
d76ded2c52 Update docs 2021-03-31 00:58:06 -05:00
hwdsl2
f2872197b1 Update docs 2021-03-29 15:07:41 -05:00
hwdsl2
356a5bd130 Update docs 2021-03-29 15:05:45 -05:00
hwdsl2
4d371e360e Update docs 2021-03-29 00:09:15 -05:00
hwdsl2
191e0af9ff Update docs 2021-03-27 22:59:59 -05:00
hwdsl2
9437be8553 Update docs 2021-03-27 14:51:18 -05:00
hwdsl2
de2acaabc5 Update IKEv2 docs 
- Add Linux instructions for IKEv2
 2021-03-27 00:48:09 -05:00
hwdsl2
bf0f557416 Update docs 2021-03-21 14:48:44 -05:00
hwdsl2
ff38c87632 Update docs 2021-03-20 00:06:31 -05:00
hwdsl2
8fa3bfac80 Cleanup 2021-03-07 00:12:46 -06:00
hwdsl2
1abcd704be Update IKEv2 config 
- Use the AES_GCM128 cipher for improved performance
  Ref: https://libreswan.org/wiki/Benchmarking_and_Performance_testing
- Update docs
 2021-03-06 14:07:07 -06:00
hwdsl2
11f8502e3a Improve IKEv2 setup 
- Use default key size (2048 bits) when generating key pairs using
  certutil. This significantly reduces IKEv2 setup time on servers
  with less powerful CPUs, such as Raspberry Pis, while still providing
  sufficient security.
- Update docs
 2021-03-05 21:33:41 -06:00
hwdsl2
e7e9bf2dc0 Update docs 2021-03-01 10:12:46 -06:00
hwdsl2
ac86c8831c Update docs 
- Add new section for advanced usage
- Clean up important notes section
- Update IKEv2 docs
 2021-02-28 15:54:58 -06:00
hwdsl2
78a9f608e5 Update IKEv2 docs 
- Update Windows IKEv2 client instructions. Ref: #940.
 2021-02-21 14:57:37 -06:00
hwdsl2
12fdc8c11d Update docs 2021-02-10 10:26:18 -06:00
hwdsl2
ad1c635ca3 Update IKEv2 docs 
- Android 6.0 and older devices require additional instructions
  for IKEv2. Ref: #930
 2021-02-06 15:18:01 -06:00
hwdsl2
97624bf292 Update docs 2021-02-04 21:43:03 -06:00
hwdsl2
1327f9123e Update docs 2021-02-02 10:45:05 -06:00
hwdsl2
954b2acb7c Fix for IKEv2 
- Fix an issue where multiple IKEv2 clients behind the same NAT cannot
  connect simultaneously to the VPN server. Note that before this fix,
  this issue only occurs when using an IP address (instead of a DNS name)
  for IKEv2 for the VPN server.
- This issue is found to be related to Libreswan's matching of local IDs
  when checking connections. A local ID with '@' prefix has type ID_FQDN,
  which does not match the ID_IPV4_ADDR type that the peer expects. This
  prevents connection switching from working correctly for the scenario
  above. Removing the prefix fixed the issue.
- Fixes #924
 2021-02-01 21:42:31 -06:00
hwdsl2
c6182d76bb Update docs 2021-01-31 00:30:33 -06:00
hwdsl2
f6b8d13b05 Update docs 2021-01-30 14:31:37 -06:00
hwdsl2
cd588a07ae Update docs 2021-01-29 00:05:16 -06:00
hwdsl2
ec5dda8c1c Update IKEv2 docs 
- Update Windows IKEv2 client instructions, with steps to import
  the .p12 file using certutil, and add the VPN connection using
  Windows PowerShell for improved security and performance.
 2021-01-28 02:13:05 -06:00
hwdsl2
0ed9015a6b Update docs 2021-01-25 22:51:04 -06:00
hwdsl2
8c286df143 Cleanup 2021-01-24 20:01:40 -06:00
hwdsl2
7e20055671 Update docs 2021-01-24 15:55:26 -06:00
hwdsl2
2864473576 Update docs 2021-01-23 16:05:51 -06:00
hwdsl2
1c975c8410 Update docs 2021-01-21 23:11:20 -06:00
hwdsl2
0199df0369 Update IKEv2 docs 2021-01-21 01:39:15 -06:00
hwdsl2
7d9f2c6603 Fix IKEv2 
- Fix an issue with IKEv2 disconnecting after one hour due to IKE SA
  expiration, by setting ikelifetime and salifetime to 24h.
  Ref: #913 #844 https://libreswan.org/man/ipsec.conf.5.html
 2021-01-20 01:39:07 -06:00
hwdsl2
27dc3d25f2 Update docs 2021-01-19 01:42:29 -06:00
hwdsl2
bac2c9cf4c Update docs 2021-01-18 22:49:55 -06:00
hwdsl2
215c9030ba Update docs 2021-01-18 11:03:39 -06:00
hwdsl2
a3dae331b8 Update docs 2021-01-18 00:02:04 -06:00
hwdsl2
927e0ca7e3 Update docs 
- Update IKEv2 docs for .mobileconfig support
 2021-01-14 23:58:20 -06:00
hwdsl2
6c55c19b44 Update docs 
- Update Linux VPN client command-line instructions
 2021-01-08 01:29:05 -06:00
haleyrom
5d9929c8c7
Update Ubuntu VPN client instructions (#615) 
- Update instructions for configuring Ubuntu (and Deepin) VPN clients
- Fixes #906
 2021-01-08 00:54:30 -06:00
hwdsl2
0a8470da38 Update docs 
- Update Linux VPN client instructions. Ref: #876
 2021-01-05 23:53:07 -06:00
hwdsl2
fdd220b7a3 Update docs 2021-01-03 15:20:27 -06:00
hwdsl2
dabf765978 Update year 2021-01-03 00:35:24 -06:00
hwdsl2
5f1ca68350 Update docs 2020-12-31 23:10:10 -06:00
hwdsl2
88764568d2 Update docs 2020-12-29 16:36:44 -06:00
hwdsl2
8adead17b7 Update docs 2020-12-27 00:16:49 -06:00
hwdsl2
7006fb3fa5 Update docs 2020-12-26 15:19:21 -06:00
hwdsl2
95a7f9cde5 Update IKEv2 docs 2020-12-20 01:14:40 -06:00
hwdsl2
ac222d447c Update docs 
- Add note for macOS Big Sur 11.0. Closes #894.
 2020-12-16 00:01:08 -06:00
hwdsl2
cf96051d6f Update docs 2020-12-13 15:52:27 -06:00
hwdsl2
1c28442211 Update docs 2020-12-07 01:11:23 -06:00
hwdsl2
c424228658 Update IKEv2 docs 2020-12-01 00:42:11 -06:00
hwdsl2
4eb84bb3bf Update docs 
- Closes #882
 2020-11-24 20:53:04 -06:00
hwdsl2
afb8a7acce New Libreswan version 
- Upgrade Libreswan from 3.32 to 4.1
 2020-11-11 00:27:44 -06:00
hwdsl2
bff8e6cbc8 Update docs 2020-11-08 11:19:26 -06:00
Fuchen Shi
ba0d3f8dbd
Update ikev2-howto-zh.md (#867) 2020-11-08 11:09:47 -06:00
hwdsl2
580678aed5 Update docs 2020-08-26 23:53:41 -05:00
S. X. Liang
736877330b
Add AWS deployment template (#838) 
Add AWS deployment template

Authored-by: Scottpedia (https://github.com/Scottpedia)
 2020-08-26 22:20:04 -05:00
hwdsl2
5d8932e411 Update IKEv2 docs 2020-07-12 14:42:04 -05:00
hwdsl2
71dc5bab01 Update IKEv2 docs 
- Connecting multiple IKEv2 clients from behind the same NAT
  requires setting the "local ID" field to match the client name.
  Ref: https://github.com/libreswan/libreswan/issues/237
 2020-07-06 22:42:45 -05:00
hwdsl2
93e89919ac Update IKEv2 docs 2020-07-04 01:35:10 -05:00
hwdsl2
50ac87c7b3 Update docs 2020-06-11 01:37:47 -05:00
hwdsl2
2def2f2f20 Update docs 2020-06-08 02:01:17 -05:00
hwdsl2
8ea8bbfa4e Update IKEv2 docs 
- Add instructions for add/revoke client certificates
 2020-06-06 23:09:58 -05:00
hwdsl2
f3a93e17fc Update IKEv2 docs 2020-06-05 00:44:33 -05:00
hwdsl2
99e87f5287 Update IKEv2 docs 2020-05-31 17:37:49 -05:00
hwdsl2
204904abf4 Update IKEv2 docs 2020-05-30 23:13:14 -05:00
hwdsl2
60d89c7181 Update docs 2020-05-30 02:52:49 -05:00
hwdsl2
9a9496b41b Update docs 2020-05-25 14:29:51 -05:00
hwdsl2
09c68fda01 Update docs 
- Add troubleshooting section for Android MTU/MSS issues
- Remove "Access VPN server's subnet". This seems to work fine using
  the default configuration, without additional IPTables rules
 2020-05-16 23:35:52 -05:00
hwdsl2
d44b09d577 Update docs 2020-05-11 23:23:38 -05:00
hwdsl2
ace41ebc29 Add IKEv2 script 
- Add a helper script for automatic IKEv2 setup
- Update IKEv2 docs
 2020-05-11 01:18:34 -05:00
hwdsl2
1839943b0e Update docs 2020-05-03 22:12:17 -05:00
hwdsl2
9e6b26b1b2 Update docs 2020-05-03 01:59:37 -05:00
hwdsl2
7076376aac Update IKEv2 docs 
- For users running Libreswan 3.31, the "Use RSA/PSS signatures" option
  needs to be enabled in the strongSwan Android VPN client.
- Ref: https://lists.libreswan.org/pipermail/swan/2020/003440.html
 2020-04-30 01:13:39 -05:00
hwdsl2
03c4dd9b24 Update clients-zh.md 2020-04-11 17:02:00 -05:00
Stephen Nancekivell
228d801adb
Update clients.md (#767) 2020-04-11 16:19:35 -05:00
hwdsl2
ca6bf9818d Update docs 2020-01-15 23:58:44 -08:00
hwdsl2
815fdc0b1c Update docs 2020-01-13 00:22:25 -08:00
hwdsl2
4b28ce5de9 Update IKEv2 docs 
- Update macOS and iOS IKEv2 instructions
 2019-11-10 19:32:29 -08:00