gostipsec

Next: , Up: (dir)  


gostipsec is pure Go ESPv3/IKEv2 implementation with AES-GCM, curve25519 and GOST cryptography support. It consists of ESPER (for ESPv3) and IKER (for IKEv2) daemons. It was created in FSUE STC "Atlas" (ФГУП НТЦ "Атлас").

Beware: this is alpha quality code, intended only for IPsec testing purposes! ESPER was not extensively tested with IPv4 and currently it works only under FreeBSD (probably under OpenBSD too). IKER lacks many many production necessary features and proper error handling, trusting remote’s side behaviour, panicking if something goes wrong.

          ┌──────┐          ┌────┐          ┌─────┐          ┌────┐          
          │remote│          │iker│          │esper│          │ipfw│          
          └──┬───┘          └─┬──┘          └──┬──┘          └─┬──┘          
             │                │                │               │             
╔══════╤═════╪════════════════╪════════════╗   │               │             
║ UDP  │     │                │            ║   │               │             
╟──────┘     │    IKEv2...    │            ║   │               │             
║            │ <───────────────            ║   │               │             
║            │                │            ║   │               │             
║            │    IKEv2...    │            ║   │               │             
║            │ ───────────────>            ║   │               │             
╚════════════╪════════════════╪════════════╝   │               │             
             │                │                │               │             
             │                │                │               │             
             │    ╔═══════════╪══╤═════════════╪════════════╗  │             
             │    ║ UNIX-SOCKET  │             │            ║  │             
             │    ╟─────────────setkey-commands│            ║  │             
             │    ║           │ ───────────────>            ║  │             
             │    ╚═══════════╪════════════════╪════════════╝  │             
             │                │                │               │             
             │                │                │               │             
             │                │   ╔════════════╪═══╤═══════════╪════════════╗
             │                │   ║ DIVERT-SOCKET  │           │            ║
             │                │   ╟──────────────encrypted ESP │            ║
             │                │   ║            │ <──────────────            ║
             │                │   ║            │               │            ║
             │                │   ║            │ decrypted ESP │            ║
             │                │   ║            │ ──────────────>            ║
             │                │   ║            │               │            ║
             │                │   ║            │ unencrypted IP│            ║
             │                │   ║            │ <──────────────            ║
             │                │   ║            │               │            ║
             │                │   ║            │  encrypted IP │            ║
             │                │   ║            │ ──────────────>            ║
             │                │   ╚════════════╪═══════════════╪════════════╝
             │                │                │               │             

gostipsec is copylefted free software licenced under GNU Affero GPLv3.


Next: , Up: (dir)