https://jayminpatel.elemprin.com/tags/ipsec/Recent content in IPSec on Jaymin PatelHugoen-usMon, 22 Aug 2022 00:00:00 +0530https://jayminpatel.elemprin.com/posts/2022-08-22-libreswan-ipsec-uci/Mon, 22 Aug 2022 00:00:00 +0530https://jayminpatel.elemprin.com/posts/2022-08-22-libreswan-ipsec-uci/<p>Setting up an IPSec VPN on OpenWrt used to mean editing <code>/etc/ipsec.conf</code> by hand -- tracking down the right parameters for your topology, debugging misconfigured secrets, and restarting the service after every change. For site-to-site tunnels between branch offices, or road-warrior access for remote employees, the manual approach worked but didn't scale.</p> <p>Libreswan, the IPSec implementation used in OpenWrt, is a battle-tested VPN stack. But until now, it lacked the configuration layer that makes OpenWrt's ecosystem so powerful: UCI (Unified Configuration Interface). With UCI support, Libreswan joins the rest of OpenWrt's services -- configurable through a consistent interface, scriptable for automation, and manageable at scale.</p>