Zeema
New design
Catalogue / vpn-gateway

strongSwan

VPN gatewaystrongswan

IPsec IKEv2 daemon for site-to-site tunnels and remote access with NAT traversal and MOBIKE.

Provider
default
Kind
VPN gateway
Category
Edge
Official docs
https://docs.strongswan.org/docs/latest/index.html
Properties · 5 set by this component
propertytypevaluesrequiredkind defaultthis component
activeActiveboolean—nofalse▸ false
authMethod · component propertyenumpsk | certificate | eapnocertificateinherited
bgpboolean—nofalse▸ false
ikeVersion · component propertyenumikev1 | ikev2noikev2inherited
managedboolean—nofalse▸ false
mobike · component propertyboolean—notrueinherited
natTraversal · component propertyboolean—notrueinherited
peerTypeenumsite-to-site | point-to-site | cloud-to-cloudno—▸ site-to-site
throughputMbpsinteger—no—inherited
tunnelTypeenumipsec | ssl | wireguardno—▸ ipsec
Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.
Use it in a design
nodes:
  - { id: "strongswan", component: "strongswan" }
Other VPN gateway products · 18
VPN Gatewayalibaba-vpn-gatewayalibabacloudvpn-gatewayAWS Client VPNaws-client-vpnawsvpn-gatewayAWS Site-to-Site VPNaws-site-to-site-vpnawsvpn-gatewayAzure VPN Gatewayazure-vpn-gatewayazurevpn-gatewayNetBirdnetbirdvpn-gatewayOpenVPNopenvpnvpn-gatewaySubmarinersubmarinervpn-gatewayTailscaletailscalevpn-gatewayGeneric VPN gatewayvpn-gatewayvpn-gatewayWireGuardwireguardvpn-gatewayZeroTierzerotiervpn-gatewayCloud VPNgoogle-cloud-vpngcpvpn-gatewayIBM Cloud VPN for VPCibm-vpn-gatewayibmvpn-gatewayClient VPN for VPCibm-vpn-serveribmvpn-gatewaySite-to-Site VPNoci-site-to-site-vpnocivpn-gatewayNeutron VPNaaSopenstack-neutron-vpnaasopenstackvpn-gatewayClient Gatewayoutscale-client-gatewayoutscalevpn-gatewayVirtual Gatewayoutscale-virtual-gatewayoutscalevpn-gateway
Source
# yaml-language-server: $schema=../../schema/component.schema.json
# strongSwan: IPsec IKE daemon implementing IKEv2 and legacy IKEv1, configured through
# vici/swanctl. Documented scenarios cover both site-to-site tunnels and remote access
# with virtual IPs, MOBIKE and NAT traversal; routing is static unless a plugin adds BGP.
schemaVersion: "1"
type: "component"
id: "strongswan"
kind: "vpn-gateway"
provider: "default"
docs: "https://docs.strongswan.org/docs/latest/index.html"
defaults:
  managed: false
  tunnelType: "ipsec"
  peerType: "site-to-site"
  bgp: false
  activeActive: false
properties:
  ikeVersion:
    type: "enum"
    values: ["ikev1", "ikev2"]
    default: "ikev2"
  authMethod:
    type: "enum"
    values: ["psk", "certificate", "eap"]
    default: "certificate"
  natTraversal:
    type: "boolean"
    default: true
  mobike:
    type: "boolean"
    default: true

The same page as markdown, for an agent: /catalogue/components/strongswan.md