[gentoo-user] Traffic Intensive IPSec Tunnel

[Nick Khamis]

Hello Everyone,

Our service provider requires all connections between us be done
through IPSec IKE. From the little bit of research, I found that this
is achieved using a system with IPSec kernel modules enabled, along
with cryptography modules. On the application level, I saw ipsec tool,
OpenSWAN, and OpenVPN.

What I was wondering is which should be used for traffic intensive
connections in a deployment environment. Without starting any OpenVPN
vs OpenSwan debate, we would really like to keep the application level
to a minimum. Meaning if we could achieve the tunnel using the
required kernel modules, ipsec-tools and iptables, we see that as
keeping it simple and effective.

Your insight, suggested how-to pages are greatly appreciated.

Thanks in Advance,

Nick.