strongSwan KVM Tests / ikev2 / net2net-iptfs
Test ikev2/net2net-iptfs
Description
A connection between the subnets behind the gateways moon and sun is set up enabling IP-TFS (RFC 9347) to aggregate small packets into a single ESP packets and fragment large packets across multiple ESP packets. The authentication is based on X.509 certificates. Upon the successful establishment of the IPsec tunnel, the updown script automatically inserts iptables-based firewall rules that let pass the tunneled traffic. In order to test both tunnel and firewall, client alice behind gateway moon sends several pings to client bob located behind gateway sun.