View Source: 26sec - Waikato Linux Users Group

Edit PageHistory Diff Info LikePages

__26sec__ is the name for the [IPSec] implementation in the Linux 2.6 kernel. It is also known as "NET_KEY" (it's name in .config).

It is based on the kernel API from the [KAME project|http://www.kame.net/project-overview.html], a Japanese project to bring IPsec to [BSD] operating systems.

26sec does away with the KLIPS system of having an ipsec0 device to route traffic over and firewall on.  Shorewall have some [patches to netfilter|http://shorewall.net/pub/shorewall/contrib/IPSEC/] for matching IPSec traffic using the 26sec API.

There are two sets of userspace tools (and several forks of one of them!) you can use with 26sec:

* the *S/WAN's (FreeSwan, OpenSwan and StrongSwan)
* KAME's IpsecTools

See also:

* [Openswan's wiki page on 26sec|http://wiki.openswan.org/index.php/26sec]
* [Ken Bantoft's (OpenS/WAN developer) talk on the future of IPsec on Linux|http://www.xelerance.com/talks/linuxtag2004/]
* [Andreas Steffen's (strongSwan developer) talk on the Advanced Features of Linux strongSwan|http://www.strongswan.org/docs/LinuxTag2005-strongSwan.pdf]
* [IPsec using Linux 2.6 and Shorewall|http://www.shorewall.net/IPSEC-2.6.html]
* [the IPSEC HowTo|http://www.ipsec-howto.org/]
* [the LARTC section on IPSEC|http://lartc.org/howto/lartc.ipsec.html]
* [Openswan Book from the developers of Openswan |http://www.packtpub.com/openswan/book]

----
CategorySecurity

6 pages link to 26sec:

Last edited on Wednesday, January 18, 2006 9:20:32 pm by "MohanRaphel"

Edit PageHistory Diff Info LikePages