Meta tags:
author=strongSwan project;
description=strongSwan is an open-source, modular and portable IPsec-based VPN solution;

Headings (most frequently used words):

strongswan, and, the, source, ipsec, based, is, internet, key, exchange, ike, open, modular, portable, vpn, solution, comprehensive, implementation, of, protocols, that, allows, securing, ip, traffic, in, policy, route, scenarios, from, simple, to, very, complex, features, code, licensed, under, gplv2, with, commercial, licensing, options, available, documentation, support, modularity, authentication, cryptography, portability,

Text of the page (most frequently used words):
and (25), rfc (18), #support (12), eap (10), the (8), #strongswan (8), ikev2 (7), authentication (6), ipsec (6), documentation (5), about (5), more (5), for (5), key (5), with (4), certificates (4), based (4), available (3), commercial (3), licensing (3), source (3), android (3), linux (3), via (3), plugin (3), tnc (3), internet (3), ike (3), exchange (3), features (3), 2026 (2), github (2), security (2), blog (2), license (2), options (2), gplv2 (2), freebsd (2), macos (2), windows (2), network (2), tls (2), multiple (2), exchanges (2), elliptic (2), curve (2), signatures (2), keys (2), interface (2), signature (2), algorithms (2), optional (2), radius (2), crypto (2), plugins (2), can (2), modular (2), supported (2), address (2), fragmentation (2), policy (2), latest (2), open (2), version (2), vpn (2), imprint, team, main, sponsors, facebook, twitter, bluesky, social, help, osv, advisories, rss, downloads, project, free, commecial, extensively, documented, code, licensed, under, app, integration, into, desktops, networkmanager, has, been, ported, ios, runs, kernels, portability, trusted, connect, compliant, swima, 8412, 7171, 6876, 5792, 5793, classic, post, quantum, including, kem, fips, 203, 9370, x25519, group, ed25519, 8420, 8031, nist, groups, ecdsa, storage, private, smartcard, pkcs, protected, tpm, crls, ocsp, 6960, use, strong, 7427, 509, pre, shared, 4739, relaying, messages, aaa, server, secure, user, sim, aka, ttls, peap, mschapv2, etc, cryptography, built, integrity, tests, libraries, provide, credentials, methods, configs, access, stacks, system, offers, great, extensibility, flexibility, modularity, implemented, rfcs, drafts, childless, initiation, 6023, sas, may, redirected, another, gateway, 5685, virtual, pool, managed, daemon, dhcp, sql, database, dead, peer, detection, dpd, takes, care, dangling, tunnels, 3706, message, avoid, issues, 7383, nat, traversal, udp, encapsulation, port, floating, 3947, automatic, insertion, deletion, firewall, rules, dynamic, update, mobike, 4555, fully, tested, tunnel, transport, mode, connections, ipv6, implements, protocol, ikev1, also, 7296, below, you, find, some, information, how, tos, found, its, comprehensive, implementation, protocols, that, allows, securing, traffic, route, scenarios, from, simple, very, complex, get, now, learn, changelog, release, portable, solution, download,

Text of the page (random words):
strongswan ipsec vpn for linux android freebsd macos windows documentation security support license about blog download github strongswan open source modular and portable ipsec based vpn solution latest release version 6 1 0 2026 09 07 changelog get the latest open source gplv2 version now or learn more about commercial licensing options strongswan is a comprehensive implementation of the internet key exchange ike protocols that allows securing ip traffic in policy and route based ipsec scenarios from simple to very complex more about its features features below you ll find some of the key features of strongswan more information and how tos can be found in the documentation internet key exchange ike implements the ikev2 rfc 7296 key exchange protocol ikev1 is also supported fully tested support of ipv6 ipsec tunnel and transport mode connections dynamic ip address and interface update with mobike rfc 4555 automatic insertion and deletion of ipsec policy based firewall rules nat traversal via udp encapsulation and port floating rfc 3947 support of ikev2 message fragmentation rfc 7383 to avoid issues with ip fragmentation dead peer detection dpd rfc 3706 takes care of dangling tunnels virtual ip address pool managed by ike daemon dhcp radius or sql database ikev2 sas may be redirected to another gateway rfc 5685 childless ikev2 sa initiation is supported rfc 6023 implemented rfcs and internet drafts modularity a modular plugin system offers great extensibility and flexibility plugins can provide crypto algorithms credentials authentication methods configs access to ipsec and network stacks and more optional built in integrity and crypto tests for plugins and libraries authentication cryptography secure ikev2 eap user authentication eap sim eap aka eap tls eap ttls eap peap eap mschapv2 etc optional relaying of eap messages to aaa server via eap radius plugin support of ikev2 multiple authentication exchanges rfc 4739 authentication based on x 509 certificates or pre shared keys use of strong signature algorithms with signature authentication in ikev2 rfc 7427 support for crls and ocsp rfc 6960 storage of private keys and certificates on a smartcard pkcs 11 interface or protected by a tpm 2 0 support of nist elliptic curve dh groups and ecdsa signatures and certificates support of x25519 elliptic curve dh group rfc 8031 and ed25519 signatures and certificates rfc 8420 support for multiple classic and post quantum key exchanges rfc 9370 including ml kem fips 203 trusted network connect compliant to pb tnc rfc 5793 pa tnc rfc 5792 pt tls rfc 6876 pt eap rfc 7171 and swima for pa tnc rfc 8412 portability runs on linux 2 6 3 x 4 x 5 x and 6 x kernels has been ported to android freebsd macos ios and windows integration into linux desktops via networkmanager plugin an android app is available the strongswan source code is licensed under the gplv2 with commercial licensing options available more about commercial licensing documentation and support documentation strongswan is extensively documented support free and commecial support is available strongswan project downloads license about blog rss security advisories osv help documentation support social github bluesky x twitter facebook main sponsors 2026 by the strongswan team imprint